CRITICALZero Day
Global

Fortinet Rushes Emergency Fixes for Exploited Zero-Day

Monday, April 6, 2026 at 09:37 AM UTC·Source: SecurityWeek

Updated: Monday, April 6, 2026 at 09:38 AM UTC

Executive Summary

The improper access control bug in FortiClient EMS allows unauthenticated attackers to execute arbitrary code remotely. The post Fortinet Rushes Emergency Fixes for Exploited Zero-Day appeared first on SecurityWeek .

Analysis

The improper access control bug in FortiClient EMS allows unauthenticated attackers to execute arbitrary code remotely. The post Fortinet Rushes Emergency Fixes for Exploited Zero-Day appeared first on SecurityWeek .

Indicators of Compromise (1)

CVE (1)
CVE-2026-35616
NVDMITRE CVE
Source Attribution

Originally published by SecurityWeek on Apr 6, 2026.

Related Threats

CRITICALZero Day

Fortinet customers confront actively exploited zero-day, with a full patch still pending

Two critical defects in FortiClient EMS have been exploited in the past couple weeks. Experts push for users to apply an immediate hotfix. The post Fortinet customers confront actively exploited zero-day, with a full patch still pending appeared first on CyberScoop .

CyberScoop
CRITICALZero Day

Fortinet Issues Emergency Patch for FortiClient Zero-Day

The authentication bypass flaw, tracked as CVE-2026-35616, is the latest in a series of Fortinet vulnerabilities that have been exploited in the wild.

CVE-2026-35616
Dark Reading
CRITICALZero DayPOC

Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit

Exploit code has been released for an unpatched Windows privilege escalation flaw reported privately to Microsoft, allowing attackers to gain SYSTEM or elevated administrator permissions. [...]

BleepingComputer