What is GHSA-859h-72wv-gj8p?

GHSA-859h-72wv-gj8p is a security advisory published by GitHub Security Advisories with Medium severity. A execution with unnecessary privileges vulnerability in Fortinet FortiClientEMS 7.4.3 through 7...

Which CVE IDs does GHSA-859h-72wv-gj8p cover?

GHSA-859h-72wv-gj8p covers the following CVE IDs: CVE-2026-121527. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-859h-72wv-gj8p?

GHSA-859h-72wv-gj8p has a CVSS v3 base score of 6.7, published by GitHub Security Advisories.

GHSA-859h-72wv-gj8pMediumCVSS 6.7

A execution with unnecessary privileges vulnerability in Fortinet FortiClientEMS 7.4.3 through 7...

Vendor

GitHub Security Advisories

Published

November 12, 2026

Last Modified

November 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-121527 →

📋 Description

A execution with unnecessary privileges vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.7, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow an authenticated local attacker with admin privileges to gain root shell access via CLI commands.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-121527
https://fortiguard.fortinet.com/psirt/FG-IR-26-192
https://github.com/advisories/GHSA-859h-72wv-gj8p