CVE-2026-35616

Fortinet FortiClient EMS Improper Access Control Vulnerability

Forticlientems

A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.

4. Apr 2026

Ausgewertete Quellen

• Hersteller
  https://fortiguard.fortinet.com/psirt/FG-IR-26-099
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-35616
• CISA
  Fortinet FortiClient EMS Improper Access Control Vulnerability
• NVD
  CVE-2026-35616