CVE-2025-46774CWE-347

CVE-2025-46774

High · published October 14, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
0.2
In the wild
Unconfirmed
What it is

An Improper Verification of Cryptographic Signature vulnerability [CWE-347] in FortiClient MacOS installer version 7.4.2 and below, version 7.2.9 and below, 7.0 all versions may allow a local user to escalate their privileges via FortiClient related executables.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00082 · 0.2th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2025-10-14T20:15Z
Affected products (2)
ProductVersionsFixed in
fortinet/forticlient≥ 7.0.0, < 7.2.107.2.10
fortinet/forticlient≥ 7.4.0, < 7.4.47.4.4
References (1)
https://fortiguard.fortinet.com/psirt/FG-IR-25-126 · [email protected]
EPSS history
Timeline
  • 14 OCT 15:23Z
    An Improper Verification of Cryptographic Signature vulnerability [CWE-347] in FortiClient MacOS installer version 7.4.2 and below, version 7.2.9 and below…
    cvelistv5