Fortinet FortiClient EMS Improper Access Control Vulnerability
Fortinet · FortiClient EMS
Date added (CISA)
2026-04-06
Remediation due
2026-04-09
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Fortinet FortiClient EMS contains an improper access control vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.