CVE-2026-70465
Received Received - Intake

Buffer Overflow in Fortinet FortiClient Windows

Publication date: 2026-08-12

Last updated on: 2026-08-12

Assigner: Fortinet, Inc.

Description
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11 may allow an unauthenticated attacker in a position to alter or craft DNS responses to the targeted host to execute arbitrary code via malicious packets.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-12
Last Modified
2026-08-12
Generated
2026-08-12
AI Q&A
2026-08-12
EPSS Evaluated
N/A
NVD
CVE-2026-70465
EUVD
EUVD-2026-57188

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
fortinet forticlient From 7.4.0 (inc) to 7.4.3 (inc)
fortinet forticlient From 7.2.0 (inc) to 7.2.11 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a buffer overflow vulnerability in Fortinet FortiClientWindows versions 7.4.0 through 7.4.3 and 7.2.0 through 7.2.11. It allows an unauthenticated attacker to send malicious DNS responses to a targeted host, potentially leading to arbitrary code execution.

Detection Guidance

This vulnerability involves a buffer overflow in FortiClientWindows versions 7.4.0 through 7.4.3 and 7.2.0 through 7.2.11. Detection requires checking installed FortiClient versions and monitoring for unusual network traffic or crashes. No specific commands are provided in the context.

Impact Analysis

An attacker could exploit this to run malicious code on your system, potentially gaining control over it. This could lead to data theft, system damage, or further network compromise if the attacker gains elevated privileges.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating GDPR and HIPAA requirements for data protection and security. Organizations may face penalties or compliance failures if exploited.

Mitigation Strategies

Update FortiClientWindows to a version that is not affected by this vulnerability. Specifically, upgrade to versions beyond 7.4.3 or 7.2.11 depending on your current installation. If immediate patching is not possible, consider isolating affected systems from untrusted networks or disabling DNS response processing temporarily.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-70465. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart