Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2026-35616 [Critical] [Actively exploited]

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-35616.

CVSS: 9.8
Exploit Status: Actively exploited
Coverage Span: 2026-04-07
Reports: 1 related reports

Associated Reports & Timeline

API Authentication Bypass in FortiClient EMS 7.4.5-7.4.6–CVE-2026-35616

CVE-2026-35616: FortiClient EMS 7.4.5-7.4.6 trusts spoofable headers as cert auth and skips signature checks, letting attackers forge certificates for API access; exploited in the wild.