---
id: 3833
title: "API Authentication Bypass in FortiClient EMS 7.4.5-7.4.6–CVE-2026-35616"
cve: CVE-2026-35616
cvss: 9.8
severity: critical
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/api-authentication-bypass-in-forticlient-ems-7-4-5-7-4-6-cve-2026-35616"
published_at: "2026-04-07 00:00"
tags: ["vulnerability-research", "authentication-bypass", "certificate-validation", "forticlient-ems", "cve-2026-35616", "fortinet", "exploited-in-the-wild"]
phying_url: "https://phying.com/item/3833"
lang: en
---

# API Authentication Bypass in FortiClient EMS 7.4.5-7.4.6–CVE-2026-35616

## Summary

CVE-2026-35616: FortiClient EMS 7.4.5-7.4.6 trusts spoofable headers as cert auth and skips signature checks, letting attackers forge certificates for API access; exploited in the wild.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2026-35616
- **CVSS:** 9.8
- **Published:** 2026-04-07 00:00
- **Original:** https://bishopfox.com/blog/api-authentication-bypass-in-forticlient-ems-7-4-5-7-4-6-cve-2026-35616
- **Phying News:** https://phying.com/item/3833