← Home
Hardcoded Encryption Key Used for VPN Saved Passwords
Source: fortinet / FG-IR-26-129
— original advisory
Published: 2026-05-12
· Last updated: 2026-05-12
· Vendor severity: Not rated by vendor
CVEs
| CVE | CVSS | CWE | Exploitation |
|---|
| CVE-2026-44278 |
2.1 |
CWE-862: Missing Authorization |
Not observed in the wild |
Affected Products
| Product | Affected versions | Fixed version |
|---|
| FortiClientWindows |
7.4.2 |
Not specified by vendor |
| FortiClientWindows |
7.4.1 |
Not specified by vendor |
| FortiClientWindows |
7.4.0 |
Not specified by vendor |
| FortiClientWindows |
7.2.14 |
Not specified by vendor |
| FortiClientWindows |
7.2.13 |
Not specified by vendor |
| FortiClientWindows |
7.2.12 |
Not specified by vendor |
| FortiClientWindows |
7.2.11 |
Not specified by vendor |
| FortiClientWindows |
7.2.10 |
Not specified by vendor |
| FortiClientWindows |
7.2.9 |
Not specified by vendor |
| FortiClientWindows |
7.2.8 |
Not specified by vendor |
| FortiClientWindows |
7.2.7 |
Not specified by vendor |
| FortiClientWindows |
7.2.6 |
Not specified by vendor |
| FortiClientWindows |
7.2.5 |
Not specified by vendor |
| FortiClientWindows |
7.2.4 |
Not specified by vendor |
| FortiClientWindows |
7.2.3 |
Not specified by vendor |
| FortiClientWindows |
7.2.2 |
Not specified by vendor |
| FortiClientWindows |
7.2.1 |
Not specified by vendor |
| FortiClientWindows |
7.2.0 |
Not specified by vendor |