boxscore/security
CVE · referencelatest edition

Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2019-5589

Fortinet FortiClientWindows — A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   R  U  H  H  H    8.8   .0102   62.9     —
AFFECTED
  Product             Versions  Fixed
  FortiClientWindows  6.0.0 –   —
TIMELINE
  Jan 7   Reserved by fortinet
  May 28  Published (CNA: fortinet)
  Oct 13  RESCORED — CVE-2019-5589 (Fortinet FortiClientWindows). CVSS 8.6 → 8.8 (NVD).
CWE-426 · CNA: fortinet · CVSS v3.1 · 2 references · NVD status: Modified

Description

A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable

Lifecycle

Complete event history — 3 events, chronological
DateEventDetail
January 7, 2019ReservedReserved by fortinet
May 28, 2019PublishedPublished (CNA: fortinet)
October 13, 2026RESCOREDRESCORED — CVE-2019-5589 (Fortinet FortiClientWindows). CVSS 8.6 → 8.8 (NVD).

Affected

Affected products and packages — 1 row
VendorProduct / PackageEcosystemVersion introducedFixed
FortinetFortiClientWindows—6.0.0—

Weaknesses

CWE-426

References (2)

Related

Authoritative record: CVE-2019-5589 at cve.org

Vendors: fortinet

Weaknesses: CWE-426

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2019-5589 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Monday, October 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.