High Threat Security Alert (A26-04-03): Vulnerability in Fortinet FortiClientEMS

Description:

Fortinet released a security advisory to address a vulnerability in Fortinet FortiClientEMS. An attacker could exploit this vulnerability by sending specially crafted requests to an affected system.

Reports indicated that an escalation of privilege vulnerability (CVE-2026-35616) is being actively exploited in the wild. System administrators are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.

Affected Systems:

• FortiClientEMS version 7.4.5 through 7.4.6

For detailed information of the affected products, please refer to the section "Affected Products" of corresponding security advisory at vendor's website.

Impact:

Successful exploitation of the vulnerability could lead to remote code execution and escalation of privilege on an affected system.

Recommendation:

Patches for affected systems are available. System administrators of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

More Information:

• https://fortiguard.fortinet.com/psirt/FG-IR-26-099
• https://www.hkcert.org/security-bulletin/fortinet-forticlientems-remote-code-execution-vulnerability_20260408
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35616