CVE-2024-52968: Fortinet FortiClient

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

An improper authentication in Fortinet FortiClientMac 7.0.11 through 7.2.4 allows attacker to gain improper access to MacOS via empty password.

Affected products

• Fortinet FortiClient: from 7.0.11, before 7.0.13 (fixed in 7.0.13); from 7.2.3, before 7.2.5 (fixed in 7.2.5); version 7.4.0 only

Published 2025-02-11. Last modified 2026-06-17.