Known Exploited Vulnerabilities April 06, 2026 · CISA KEV Catalog

CVE-2026-35616: Fortinet Forti Client EMS Improper Access Control Vulnerability

Fortinet FortiClient EMS contains an improper access control vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-35616 Fortinet
Related: CVE-2025-61624: Fortinet Multiple Products Path Traversal Vulnerability Known Exploited Vulnerabilities · Oct 16, 2026
CVE-2026-104286: Fortinet Forti Mail Path Traversal Vulnerability Known Exploited Vulnerabilities · Oct 01, 2026
CVE-2025-25249: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Sep 09, 2026