CVE-2021-42754: Fortinet FortiClient

Medium severity, CVSS 5.0. EPSS: 0.4% chance of exploitation in the next 30 days.

An improper control of generation of code vulnerability [CWE-94] in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and below may allow an authenticated attacker to hijack the MacOS camera without the user permission via the malicious dylib file.

Affected products

• Fortinet FortiClient: from 6.4.0, up to and including 6.4.5; version 7.0.0 only

Published 2021-11-02. Last modified 2026-06-17.