{"affected":[{"defaultStatus":"unaffected","product":"FortiClientEMS","source":"CNA: fortinet","vendor":"Fortinet","versions":[{"lessThanOrEqual":"7.4.7","status":"affected","version":"7.4.3","versionType":"semver"},{"lessThanOrEqual":"7.4.1","status":"affected","version":"7.4.0","versionType":"semver"},{"lessThanOrEqual":"7.2.15","status":"affected","version":"7.2.12","versionType":"semver"},{"lessThanOrEqual":"7.2.10","status":"affected","version":"7.2.0","versionType":"semver"}]}],"cveId":"CVE-2026-121527","cwes":["CWE-250"],"description":"A execution with unnecessary privileges vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.7, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow an authenticated local attacker with admin privileges to gain root shell access via CLI commands.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.3,"severity":"medium","source":"CNA: fortinet","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","version":"3.1"}],"modifiedAt":1794432712231,"publishedAt":1794432712231,"references":[{"source":"CNA: fortinet","tags":[],"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-192"}],"remediation":[{"kind":"fix","source":"CNA: fortinet","text":"Upgrade to FortiClientEMS version 8.0.0 or above\nUpgrade to FortiClientEMS version 7.4.8 or above"}],"revision":"c1b500766872920955e43faa2685318ff9643206d86e8ec3c5a8cd80969ba032","sources":[{"modifiedAt":1794432712231,"name":"CNA: fortinet","retrievedAt":1794434924545,"url":"https://www.cve.org/CVERecord?id=CVE-2026-121527"}],"ssvc":null,"status":"published","title":"CVE-2026-121527","updatedAt":1794434924545}