Description
A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.
Published: 2026-04-04
Score: 9.1 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

Vendor Solution

Upgrade to upcoming FortiClientEMS version 7.4.7 or above Upgrade to upcoming FortiClientEMS version 7.2.11 or above

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 04 Apr 2026 11:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Sat, 04 Apr 2026 01:15:00 +0000

Type Values Removed Values Added
Description A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.
First Time appeared Fortinet
Fortinet forticlientems
Weaknesses CWE-284
CPEs cpe:2.3:a:fortinet:forticlientems:7.4.5:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:forticlientems:7.4.6:*:*:*:*:*:*:*
Vendors & Products Fortinet
Fortinet forticlientems
References
Metrics cvssV3_1

{'score': 9.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C'}

Subscriptions

Fortinet Forticlientems
cve-icon MITRE

Status: PUBLISHED

Assigner: fortinet

Published:

Updated: 2026-04-04T10:53:29.363Z

Reserved: 2026-04-03T23:49:34.986Z

Link: CVE-2026-35616

cve-icon Vulnrichment

Updated: 2026-04-04T10:53:23.244Z

cve-icon NVD

Status : Received

Published: 2026-04-04T01:16:39.720

Modified: 2026-04-04T01:16:39.720

Link: CVE-2026-35616

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses