> Hardcoded Encryption Key Used for VPN Saved Passwords

[SOURCE] Fortinet FortiGuard [DATE: 12/05/2026 07:00] [LANGUAGE: EN]

 
  CVSSv3 Score:
 
 2.1

 A Missing Authorization [CWE-862] in FortiClient Windows may allow an authenticated local attacker to decrypt a currently logged in users VPN password via use of an unprotected DLL function.

  Revised on 2026-05-12 00:00:00

[messages.read_original_source] →