FortiClient Windows VPN-only 7.4.3 build affected by CVE-2026-70465

as per the link below, the CVE is not listed/included nor has the article been updated with it. 

i would guess that the CVE you pointed out would not affect the VPN-only version, since also in the PSIRT as a workaround it’s mentioned to disable applicatiom based filtering from EMS.

Hello All,

When will forticlient vpn only 7.4.3 build 4726 be updated for FG-IR-26-156 (CVE-2026-70465)?

Hi,

I logged a ticket and TAC advise me to use paid version - 7.4.4.

 Me:
Does that mean there will be no fix for free version and customer must use the paid version and license is required as they will encounter the unlicense alert from the following?
https://community.fortinet.com/fortigate-3/troubleshooting-tip-forticlient-shows-as-unlicensed-within-fortigate-firewall-132205

TAC:

Yes, CVE-2026-70465 is not included in free version forticlient.

This is an important clarification, especially since the advisory recommends 7.4.4+ while the free VPN-only client apparently remains on 7.4.3. It would be helpful if Fortinet could confirm whether the latest VPN-only build is actually affected and, if so, what the recommended remediation path is for users who cannot upgrade through the normal release channel.

.

CVE-2026-70465 fixed with 7.4.3 B6002 and now is available for Windows to upgrade. 

CVE: https://fortiguard.fortinet.com/psirt/FG-IR-26-156
CSB: https://support.fortinet.com/support/#/bulletin
Download: https://support.fortinet.com/ or https://www.fortinet.com/support/product-downloads

The version number of the previous version was 7.4.3.8758. The version number of this new version is 7.4.3.6002, which is lower than the previous version number.

Can someone please fix this?