VulnerabilitycriticalExploited in the wild

CVE-2026-35616: Fortinet fixes actively exploited high

Security Affairsby @securityaffairsApr 6, 2026 · 13:07 UTC (Apr 6, 2026)1 min read1

Read at securityaffairs.com

Analyze CVE-2026-35616 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2026-35616 CVE-2026-21643

Tags: cve-2026-21643 cve-2026-35616 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2026-21643	Unauthenticated SQL Injection to Code Execution in Fortinet FortiClient EMS 7.4.4	9.8	98%	KEVPoC	Feb 6, 2026 KEV Apr 13, 2026
CVE-2026-35616	Unauthenticated Code Execution in Fortinet FortiClient EMS 7.4.5–7.4.6	9.8	94%	KEVPoC	Apr 4, 2026 KEV Apr 6, 2026

From the original article

1 min read at securityaffairs.com

Fortinet issued emergency patches for a critical FortiClient EMS flaw (CVE-2026-35616) actively exploited in the wild. Fortinet released out-of-band patches for a critical FortiClient EMS vulnerability, tracked as CVE-2026-35616 (CVSS 9. 1), which is already being exploited in attacks in the wild.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.