Critical Vulnerability in Fortinet FortiClient EMS
ID: 8ce66045-c30b-5b9a-b471-78114d923846
STIX ID: report--8ce66045-c30b-5b9a-b471-78114d923846
Feed Name: Kudelski Security
Threat Score
### Executive Summary A critical zero-day (CVE-2026-35616) in Fortinet FortiClient Enterprise Management Server (EMS) versions 7.4.5–7.4.6 enables unauthenticated remote code execution; Fortinet confirms active exploitation and has released emergency hotfixes while recommending upgrades to 7.4.7, network segmentation, strict access controls, and MFA to mitigate risk.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.