GITHUBEXPLOIT 9.8 CRITICAL

Exploit for Improper Access Control in Fortinet Forticlientems_F57708C0-5A99-5B20-9856-EF70613A9E51

9.8 / 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

CVE-2026-35616 - FortiClient EMS Pre-Authentication API Bypass to RCE TL;DR A critical authentication bypass in Fortinet FortiClient EMS 7.4.5 and 7.4.6 allows a completely unauthenticated, remote attacker to bypass API authentication by spoofing a...
Visit Original Source

Basic Information

ID F57708C0-5A99-5B20-9856-EF70613A9E51
Published Apr 13, 2026 at 18:49
Modified Apr 13, 2026 at 18:55

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.