EUVD-2026-18963

| CVE-2026-35616 CRITICAL
2026-04-04 fortinet
9.8
CVSS 3.1
Share

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

7
Added to CISA KEV
Apr 06, 2026 - 18:12 cisa
CISA KEV
CIRCL Exploitation Confirmed
Apr 06, 2026 - 18:12 circl
CIRCL KEV
PoC Detected
Apr 06, 2026 - 18:12 vuln.today
Public exploit code
Started Trending
Apr 06, 2026 - 16:01 vuln.today
12.8
Analysis Generated
Apr 04, 2026 - 01:00 vuln.today
EUVD ID Assigned
Apr 04, 2026 - 01:00 euvd
EUVD-2026-18963
CVE Published
Apr 04, 2026 - 00:38 nvd
CRITICAL 9.8

Tags

Fortinet Authentication Bypass

Description

A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.

Analysis

Remote code execution in Fortinet FortiClientEMS versions 7.4.5 through 7.4.6 allows unauthenticated attackers to execute arbitrary code via crafted network requests. The vulnerability stems from improper access control (CWE-284) and requires no user interaction or privileges (CVSS PR:N). …

Sign in for full analysis, threat intelligence, and remediation guidance.

Remediation

Within 24 hours: Identify all FortiClientEMS installations and confirm versions 7.4.5 and 7.4.6 inventory; contact Fortinet for available patches or interim versions. Within 7 days: Apply vendor-released patch immediately upon availability; if unavailable, isolate affected FortiClientEMS servers from untrusted networks and restrict network access to administrative personnel only. …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Priority Score

124
Low Medium High Critical
KEV: +50
EPSS: +0.0
CVSS: +49
POC: +20

Share

EUVD-2026-18963 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy