CyberSec.Space Logo
CVEブラウザに戻る

CVE-2026-35616

🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score44.8670%
EPSS Percentile95.18th
Published2026-04-04
Last Modified2026-07-24
Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.

Affected Platforms (CPE)

📦
Fortinet

Forticlientems

= 7.4.5= 7.4.6

References & Advisories

🔗 https://fortiguard.fortinet.com/psirt/FG-IR-26-099
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-35616

関連する脆弱性情報

CVE-2026-598367.5

A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1...

CVE-2024-321194.8

An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthentic...

CVE-2023-487864.3

A server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0 through 7.4.2 and before 7.2.6 may ...

CVE-2025-228595.3

A Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and FortiClientEMS Cloud 7.4.0 through 7.4....