FG-IR-26-156 / CVE-2026-70465 fix availability for FortiClient Free VPN-only (Windows)

Forum|Forum|1 month ago
August 21, 2026
3 replies
451 views

https://fortiguard.fortinet.com/psirt/FG-IR-26-156

FG-IR-26-156 (CVE-2026-70465) advisory states the fix is available in FortiClient Windows 7.4.4 / 7.2.12 and later. However, the free VPN-only agent has not received a new release since 7.4.3 (per the community note that v7.4.4–7.4.8 include no new free VPN-only build).

Could you confirm: 1. Is FortiClient Free VPN-only 7.4.3 (build 4726) vulnerable to CVE-2026-70465? 2. If yes, will a patched free VPN-only build be released, or is upgrading to a licensed version the only path to remediation?

Thanks in advance.

FortiClient

funkylicious

SuperUser

if you want an official answer, please raise a TAC support ticket.

"jack of all trades, master of none"

olpsad

New Member

It would be helpful to get an official clarification from Fortinet on this. If 7.4.3 is affected, the availability of a patched free VPN-only build would be especially important for users who only need the VPN client.