EXPOSURES › CVE-2026-35616

CVE-2026-35616

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2026-04-06 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-35616 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 85/100 rceexploited-in-wildunpatched

Fortinet FortiClient EMS allows unauthenticated attackers to execute arbitrary code via crafted requests.

This unauthenticated RCE in FortiClient EMS enables remote code execution without authentication, posing a severe risk to DIB environments relying on endpoint management tools. Organizations must immediately patch and audit access controls to prevent unauthorized code execution and potential data exfiltration.

Shame score — An unauthenticated RCE in a critical endpoint management product is a high-impact, avoidable failure that directly undermines DIB security posture.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

Fortinet · vendor FortiClient EMS · product

DESCRIPTION

Fortinet FortiClient EMS contains an improper access control vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.