Fortinet warns of a critical FortiClient EMS zero-day vulnerability that is currently being exploited, allowing attackers to ...

CVE-2026-35616 (CVSS 9.1) exploited since March 31, 2026, affects FortiClient EMS 7.4.5–7.4.6, enabling privilege escalation.

Fortinet is alerting customers of a critical OS command injection vulnerability in FortiSIEM report server that could be exploited by remote, unauthenticated attackers to execute commands through ...

Fortinet发布紧急补丁修复FortiClient EMS中的严重安全漏洞CVE-2026-35616，该漏洞已遭野外攻击利用。该漏洞允许未认证攻击者绕过API访问控制并提升权限，CVSS评分高达9.1。影响版本为7.4.5至7.4.6，公司已发布热修复补丁。安全专家建议立即应用修复程序，这是FortiClient EMS短期内第二个严重漏洞。

Fortinet customers have been urged to update their FortiClient Enterprise Management Server (EMS) products after the vendor ...