criticalclosedpatched
FortiClient EMS CVE-2026-35616 exploited (CVSS 9.1)
› Fortinet FortiClient EMS
Get an email when a new major security incident drops. No spam, unsubscribe any time.
- started
- Apr 1, 2026
- closed
- Apr 30, 2026
- CVEs
- 1
- sources
- 1
## summary
In April 2026 Fortinet observed in-the-wild exploitation of CVE-2026-35616 in FortiClient EMS, a critical privilege-escalation / unauthenticated code-execution flaw (CVSS 9.1), and released an emergency weekend hotfix for EMS 7.4.5 and 7.4.6.
severity: Critical (CVSS 9.1); exploited in the wild
## cve ids[1]
## affected
- 7.4.5 and 7.4.6 prior to hotfix (per Fortinet)
## fixed in
- Hotfix for FortiClient EMS 7.4.5 / 7.4.6
## news & write-ups[1]
## notes & caveats
Verify primary vendor advisory for exact fixed versions; facts taken from public sources listed in links.
