VulnSocial

CVE-2026-70465Disclosure(fortinet / forticlient)

LOWCVSS 8.1 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch fortinet forticlient systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11 may allow an unauthenticated attacker in a position to alter or craft DNS responses to the targeted host to execute arbitrary code via malicious packets.

fortinet CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-120

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • forticlient

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked at 2 mentions on most recent observed day (2026-08-13)
  • 3 total mentions across 2 days

Affected systems

Vendors
fortinet
Products
forticlient

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-08-12: 1Mentions · 2026-08-13: 2Patch / Workaround · 2026-08-13: 1Technical Details · 2026-08-12: 1Technical Details · 2026-08-13: 108-1208-13
Signal classification3 categories
Disclosure
133.3%
General
133.3%
Patch
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-08-121
Disclosure1
2026-08-132
General1Patch1
Full discourse3 posts
  • CERT-PY@CERTpy
    General

    ⚠️ Vulnerabilidad en productos Fortinet ❗ CVE-2026-70465 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-fortinet-7/ https://t.co/tDUWZJHaen

    Post summary

    The tweet announces a Fortinet vulnerability (CVE-2026-70465) but provides no detailed technical information, exploit code, or patch details, and does not claim active exploitation or a false positive.

    00011250
    6.7K followersView on X
  • TECHEPAGES@techepages
    Patch

    🚨 Fortinet has patched multiple critical authentication flaws across FortiWeb, FortiManager & FortiClient. 1. CVE-2026-26035 (FortiWeb): Improper RADIUS wildcard auth lets attackers log in with random creds. 2. CVE-2026-70468 (FortiManager): Auth bypass in FGFM protocol enables FortiGate impersonation. 3. CVE-2026-70465 (FortiClient): Buffer overflow via spoofed DNS → RCE. Admins urged to patch ASAP—no active exploits yet, but risk is high.

    Post summary

    The post announces patches for three critical authentication flaws in Fortinet products, details the technical nature of each weakness, confirms no known active exploitation, and urges administrators to apply the fixes immediately.

    0000061
    38 followersView on X
  • Kaitan ID Security@KaitanSecurity
    Disclosure

    ⚠️ HIGH — CVE-2026-70465 A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7… CVSS 8.1 Full analysis → https://sec.kaitan.id/cves/CVE-2026-70465 #Fortinet #CyberSecurity #InfoSec

    Post summary

    The post announces a high‑severity buffer overflow in Fortinet FortiClient for Windows 7, providing basic technical details and a link to further analysis.

    0000047
    87 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appfortinetforticlient-windows-

Explore more

Back to dashboardfortinet CVEsforticlient vulnerabilities