CVE-2023-41840: Fortinet FortiClient

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack attack via a malicious OpenSSL engine library in the search path.

Affected products

• Fortinet FortiClient: version 7.0.9 only; version 7.2.0 only; version 7.2.1 only

Published 2023-11-14. Last modified 2026-06-17.