Fortinet has released out-of-band patches for a critical security flaw impacting FortiClient EMS that it said has been exploited in thewild. Thevulnerability, trackedas CVE-2026-35616 (CVSS score: 9.1), has been described as a pre-authentication API access bypass leading to privilege escalation. "An improper access control vulnerability [CWE-284] in FortiClient EMS may allow an
Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS
The Hacker News - 5 Apr 2026 12:02
Fortinet has released out-of-band patches for a critical security flaw impacting FortiClient EMS that it said has been exploited in thewild. Thevulnerability, trackedas CVE-2026-35616 (CVSS score: 9.1), has been described as a pre-authentication API access bypass leading to privilege escalation. "An improper access control vulnerability [CWE-284] in FortiClient EMS may allow an
Share this Article
Recommended