Skip to content
NewA calmer, faster ZeroHour
VulnerabilitycriticalExploited in the wild

CVE-2026-35616: FortiClient EMS Flaw Actively Exploited in Malware Attacks

Security Affairsby @securityaffairs ()2 min read1
Read at securityaffairs.com
Analyze CVE-2026-35616 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-35616
Tags
cve-2026-35616vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-35616
Unauthenticated Code Execution in Fortinet FortiClient EMS 7.4.5–7.4.6
9.894%KEVPoC
KEV

From the original article

2 min read at securityaffairs.com

Threat actors are exploiting a critical FortiClient EMS flaw, tracked as CVE-2026-35616, to deploy malware on unpatched systems. Threat actors are exploiting a critical FortiClient EMS vulnerability, tracked as CVE-2026-35616 (CVSS score of 9. 1), that allows remote code execution without authentication.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.