PoC Released for Critical Fortinet FortiClient EMS Authentication Bypass Vulnerability
A public PoC targets critical FortiClient EMS flaw CVE-2026-35616, which Fortinet says was exploited.
A public GitHub proof-of-concept targets CVE-2026-35616, a critical improper-access-control flaw in Fortinet FortiClient EMS 7.4.5 and 7.4.6. A remote attacker without credentials can send crafted requests that bypass EMS API protections and execute unauthorized code or commands. Fortinet says 7.4.7 contains the fix, the 7.2 branch is unaffected, and FortiClient Cloud and FortiSASE were already remediated. Fortinet has confirmed that the vulnerability was exploited in the wild.
- CVE-2026-35616 affects FortiClient EMS 7.4.5 and 7.4.6.
- Unauthenticated requests can bypass protections on EMS API endpoints.
- Version 7.4.7 or later contains the fix.
- Fortinet confirmed exploitation; exposed management interfaces should be restricted.
- CVEs
- CVE-2026-35616
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-35616 | Unauthenticated Code Execution in Fortinet FortiClient EMS 7.4.5–7.4.6 | 9.8 | 94% | KEVPoC | KEV |
From the original article
2 min read at cybersecuritynews.com
A public proof-of-concept (PoC) for CVE-2026-35616, a critical authentication and authorization bypass in Fortinet FortiClient Endpoint Management Server (EMS), lets defenders test whether affected systems are exposed. The Python tool’s repository says the flaw can allow unauthenticated access to protected API endpoints. Fortinet has confirmed that the vulnerability was exploited in the wild, making prompt […]
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.