CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

2 advisories matched

CVE-2026-356169.8/CRITICALEPSS 94.0%CISA KEV

2026-04-04

Fortinet FortiClientEMS Remote Code Execution (RCE) Vulnerability via Improper Access Control (CVE-2026-35616)

[Affected Scope] Fortinet FortiClientEMS versions 7.4.5 through 7.4.6

[Impact] An unauthenticated remote attacker can execute unauthorized code or commands with system privileges via crafted network requests.

[Mitigation] Apply the official Fortinet security patch (version 7.4.7 or higher) immediately and restrict external network access to the EMS server.

CVE-2026-216439.8/CRITICALEPSS 94.0%CISA KEV

2026-02-06

[Affected Scope] Fortinet FortiClientEMS version 7.4.4

[Impact] An unauthenticated remote attacker can execute unauthorized code or commands with system privileges by sending crafted HTTP requests.

[Mitigation] Immediately apply the official vendor patches and restrict external access to the EMS management ports.