PoC Released for Critical Fortinet FortiClient EMS Authentication Bypass Vulnerability
A public PoC targets critical FortiClient EMS flaw CVE-2026-35616, which Fortinet says was exploited.
4
Stories per day · 30 days
1 RSS
2 stories, newest first · one card per story
Stories tagged #cwe-284
Broken Access control on Websocket streams
Fortinet FortiSOAR access control flaw (CVSS 4.9) lets zero-permission authenticated attackers subscribe to and inject broadcast messages into websocket streams.