Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

API Authentication Bypass in FortiClient EMS 7.4.5-7.4.6–CVE-2026-35616

bishopfox.com | vulnerability | Critical | Actively exploited | CVE-2026-35616 | #vulnerability-research | #authentication-bypass | #certificate-validation | #forticlient-ems | #cve-2026-35616 | #fortinet | #exploited-in-the-wild

Summary

CVE-2026-35616: FortiClient EMS 7.4.5-7.4.6 trusts spoofable headers as cert auth and skips signature checks, letting attackers forge certificates for API access; exploited in the wild.
CVSS
9.8
Published
Collected

original ↗

Related coverage

  1. Pre-Authentication SQL Injection in FortiClient EMS 7.4.4 - CVE-2026-21643 (bishopfox.com)
  2. CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key (bishopfox.com)
  3. Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490 (bishopfox.com)
  4. A Millisecond of Predictability: Why CVE-2026-11374 Is Hard to Exploit (bishopfox.com)
  5. Building an Exploit for FortiGate Vulnerability CVE-2023-27997 (bishopfox.com)
  6. CVE-2023-27997 Is Exploitable, and 69% of FortiGate Firewalls Are Vulnerable (bishopfox.com)

back