Insufficient access control affecting FortiClientEMS
A critical vulnerability affecting the FortiClientEMS solution would allow an unauthenticated attacker to execute code or commands on affected systems.
Description
Technical context and vulnerability details
FortiClientEMS is a centralized management solution for FortiClient agents deployed on a company's endpoints. It allows you to configure security policies, deploy updates, and monitor client device compliance. This solution is affected by a vulnerability labeled CVE-2026-35616 resulting from an access control defect. Exploitation of this vulnerability would allow an unauthenticated attacker to remotely execute arbitrary code on affected systems. It is classified critical with a severity score of 9.8 according to CVSS V3.1.
Potential Risks & Impact
Potential consequences upon exploitation
- Remote Arbitrary Code Execution;
- Compromise of system integrity;
- Breach of confidentiality and availability of data;
Affected systems
Products, components and targeted versions
- Fortinet FortiClientEMS versions 7.4.5 and 7.4.6;
Recommended Remediations & Actions
Immediate actions and recommended mitigations
- Apply the patch associated with the vulnerable version used made available by Fortinet;
Sources & External Links
Vendor security advisories and documentation
Advisory Specifications
CSIRT Emergency Response
Is your organization affected or do you suspect an incident? Our security experts are available to assist.
Report an incidentGet our alerts by email
Subscribe to receive our security alert bulletins and Iservices news straight to your inbox.