- 78/2026
- Critical
Fortinet has released a security update to address a critical vulnerability affecting FortiClient EMS versions 7.4.5 through 7.4.6
The addressed vulnerability could allow the remote attacker to gain elevated privileges, execute unauthorized code or commands via crafted requests, and gain access to the affected systems.
FortiClient EMS API Authentication and Authorization Bypass Vulnerability (CVE- 2026-35616):
- CVSS: 9.1
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Consequences: Gain Access
It should be highlighted that Fortinet is aware that the vulnerability “CVE-2026- 35616″ is being exploited in the wild.
Vulnerabilities
CVE-2026-35616
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.