CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.8. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-31365
Severity
MEDIUM
CVSS
5.8
EPSS
0.26%
Original NVD Description
An Improper Control of Generation of Code ('Code Injection') vulnerability [CWE-94] in FortiClientMac 7.4.0 through 7.4.3, 7.2.1 through 7.2.8 may allow an unauthenticated attacker to execute arbitrary code on the victim's host via tricking the user into visiting a malicious website.
Related CVEs
Other vulnerabilities affecting the same vendor(s)