CVE-2026-35616

Summary

A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.

Affected Software

Weaknesses

• CWE-284: Escalation of privilege

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: active
  • Automatable: yes
  • Technical Impact: total

Additional References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-35616

References

• https://fortiguard.fortinet.com/psirt/FG-IR-26-099

• ←Previous
• Next→