CRITICALZero Day
Global

Fortinet customers confront actively exploited zero-day, with a full patch still pending

Monday, April 6, 2026 at 09:12 PM UTC·Source: CyberScoop

Updated: Monday, April 6, 2026 at 09:14 PM UTC

Executive Summary

Two critical defects in FortiClient EMS have been exploited in the past couple weeks. Experts push for users to apply an immediate hotfix. The post Fortinet customers confront actively exploited zero-day, with a full patch still pending appeared first on CyberScoop .

Analysis

Two critical defects in FortiClient EMS have been exploited in the past couple weeks. Experts push for users to apply an immediate hotfix. The post Fortinet customers confront actively exploited zero-day, with a full patch still pending appeared first on CyberScoop .
Source Attribution

Originally published by CyberScoop on Apr 6, 2026.

Related Threats

CRITICALZero Day

Fortinet Issues Emergency Patch for FortiClient Zero-Day

The authentication bypass flaw, tracked as CVE-2026-35616, is the latest in a series of Fortinet vulnerabilities that have been exploited in the wild.

CVE-2026-35616
Dark Reading
CRITICALZero DayPOC

Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit

Exploit code has been released for an unpatched Windows privilege escalation flaw reported privately to Microsoft, allowing attackers to gain SYSTEM or elevated administrator permissions. [...]

BleepingComputer
CRITICALZero Day

Attackers Target Zero-Day Flaw in Fortinet Security Software

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/attackers-target-zero-day-flaw-in-fortinet-security-software-image_small-2-a-31344.jpg" align=right hspace=4><b>Vendor Issues Hotfix for Critical Flaw in FortiClient Endpoint Management Server</b><br>Fortinet's endpoint management security server software is under fire from attackers, who are actively targeting two critical flaws,

Bank Info Security