Advisory Engine

← Home

API authentication and authorization bypass

Source: fortinet / FG-IR-26-099 — original advisory

Published: 2026-04-04 · Last updated: 2026-04-04 · Vendor severity: Not rated by vendor Exploited (KEV)

CVEs

CVECVSSCWEExploitation
CVE-2026-35616 9.1 CWE-284: Improper Access Control Exploited (KEV)

Affected Products

ProductAffected versionsFixed version
FortiClientEMS 7.4.5 Not specified by vendor
FortiClientEMS 7.4.6 Not specified by vendor