CVE-2026-35616
KEV Critical · CVSS 9.8- CVSS
- 9.8
- nvd
- EPSS
- —
- KEV
- Listed
- 2026-04-06
- Class
- other
- CWE-284
Description
A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.
References
Status: profiled · ingested 2026-07-25T00:00:18.000Z