CVE-2026-35616
CVSS9,8Kritično
EPSS (30 dni)94,0 %
CISA KEVDaod 6. 4. 2026
Rok za popravek (CISA)9. 4. 2026
Proizvajalec: Fortinet · Izdelki: forticlientems
Uporaba v izsiljevalskih napadih: Ni podatka
Opis (NVD, angleško): A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H