HIGHVulnerability
Verified
Global

CISA KEV: Fortinet FortiClient EMS — Fortinet FortiClient EMS Improper Access Control Vulnerability

Monday, April 6, 2026 at 12:00 AM UTC·Source: CISA KEV

Updated: Monday, April 6, 2026 at 03:22 PM UTC

Executive Summary

Fortinet FortiClient EMS contains an improper access control vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.

Analysis

Fortinet FortiClient EMS contains an improper access control vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests. Added to CISA Known Exploited Vulnerabilities catalog on 2026-04-06. Remediation due: 2026-04-09.

Indicators of Compromise (1)

CVE (1)
CVE-2026-35616
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Apr 6, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerabilityNEW

Coinbase wins conditional approval for national trust bank charter

Coinbase is the latest digital asset firm to receive conditional approval from US regulators for a national trust bank charter.

Finextra
LOWVulnerabilityNEW

Businesses ready to embrace AI-to-AI commerce, consumers more wary - Visa survey

AI-to-AI commerce looks poised to scale, with more than half of US businesses willing to allow agents to negotiate prices and terms directly with other agents on their behalf, according to a survey from Visa.

Finextra
CRITICALVulnerabilityNEW

Trump's Budget Proposal Would Slash CISA After Bruising Year

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/trumps-budget-proposal-would-slash-cisa-after-bruising-year-image_small-6-a-31352.jpg" align=right hspace=4><b>White House Criticizes Cyber Defense Agency - and Proposes a Steep $700 Million Cut</b><br>The FY2027 proposal would cut roughly $707 million from CISA, reducing staffing, contractor support and coordination programs whil

Bank Info Security