Explore

Trendline Trendline
Fortinet Issues Urgent Security Update for Zero-Day Vulnerability in FortiClientEMS

Fortinet Issues Urgent Security Update for Zero-Day Vulnerability in FortiClientEMS

Fortinet Issues Urgent Security Update for Zero-Day Vulnerability in FortiClientEMS
Trendline Trendline
Fortinet Issues Emergency Patch for Critical FortiClient EMS Vulnerability Exploited in the Wild

Fortinet Issues Emergency Patch for Critical FortiClient EMS Vulnerability Exploited in the Wild

Fortinet Issues Emergency Patch for Critical FortiClient EMS Vulnerability Exploited in the Wild
Trendline Trendline
Fortinet Releases Emergency Patch for Exploited FortiClient EMS Vulnerability

Fortinet Releases Emergency Patch for Exploited FortiClient EMS Vulnerability

Fortinet Releases Emergency Patch for Exploited FortiClient EMS Vulnerability
Trendline Trendline
Fortinet Issues Urgent Update for Zero-Day Vulnerability Amid Active Exploits

Fortinet Issues Urgent Update for Zero-Day Vulnerability Amid Active Exploits

Fortinet Issues Urgent Update for Zero-Day Vulnerability Amid Active Exploits
Trendline Trendline
Fortinet Issues Emergency Fixes for Critical Zero-Day Vulnerability in FortiClient EMS

Fortinet Issues Emergency Fixes for Critical Zero-Day Vulnerability in FortiClient EMS

Fortinet Issues Emergency Fixes for Critical Zero-Day Vulnerability in FortiClient EMS
Rapid Read Rapid Read
Fortinet Releases Emergency Fixes for Critical Zero-Day Vulnerability

Fortinet Releases Emergency Fixes for Critical Zero-Day Vulnerability

Fortinet has issued emergency fixes for a critical zero-day vulnerability in its FortiClient Enterprise Management Server (EMS), identified as CVE-2026-35616. This flaw, characterized by improper access control, allows remote code execution without authentication. Fortinet's advisory warns of active exploitation in the wild, prompting the release of hotfixes for affected versions 7.4.5 and 7.4.6, while version 7.2 remains unaffected. The vulnerability was reported by cybersecurity firm Defused, which observed exploitation and disclosed the issue under responsible protocols. The Shadowserver Foundation has identified approximately 2,000 internet-accessible FortiClient EMS instances potentially vulnerable to attacks.
Rapid Read Rapid Read
CISA Mandates Urgent Patching of Fortinet EMS Vulnerability to Protect Federal Networks

CISA Mandates Urgent Patching of Fortinet EMS Vulnerability to Protect Federal Networks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a directive for federal agencies to secure FortiClient Enterprise Management Server (EMS) instances against a critical vulnerability by Friday. This security flaw, identified as CVE-2026-35616, was discovered by cybersecurity firm Defused. It is described as a pre-authentication API access bypass that allows attackers to circumvent authentication and authorization controls. Fortinet has released emergency hotfixes to address this vulnerability, which stems from improper access control weaknesses. The flaw has been actively exploited in zero-day attacks, prompting Fortinet to urge IT administrators to apply the hotfixes or upgrade to FortiClient EMS version 7.4.7. CISA has added this vulnerability to its Known Exploited Vulnerabilities Catalog and mandated that Federal Civilian Executive Branch agencies patch their systems by April 9, as per Binding Operational Directive 22-01.
Rapid Read Rapid Read
CISA Mandates Urgent Patch for Fortinet EMS Vulnerability Amid Active Exploitation

CISA Mandates Urgent Patch for Fortinet EMS Vulnerability Amid Active Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a directive for federal agencies to patch a critical vulnerability in FortiClient Enterprise Management Server (EMS) by April 9. The flaw, identified as CVE-2026-35616, allows attackers to bypass authentication controls, posing significant risks to federal networks. Discovered by cybersecurity firm Defused, the vulnerability has been actively exploited in the wild. Fortinet has released emergency hotfixes to address the issue, urging immediate action from IT administrators. CISA's directive, part of Binding Operational Directive 22-01, emphasizes the urgency of securing federal systems against this threat.
Rapid Read Rapid Read
Fortinet Issues Emergency Patch for Zero-Day Vulnerability Affecting FortiClient EMS

Fortinet Issues Emergency Patch for Zero-Day Vulnerability Affecting FortiClient EMS

Fortinet has released emergency patches to address a critical vulnerability in its FortiClient Enterprise Management Server (EMS) that has been actively exploited as a zero-day. The flaw, identified as CVE-2026-35616, is an improper access control issue that could allow remote code execution without authentication. Fortinet has observed active exploitation of this vulnerability and has provided hotfixes for FortiClient EMS versions 7.4.5 and 7.4.6, with a full fix expected in version 7.4.7. The vulnerability was reported by the cybersecurity firm Defused, which noted that attackers could bypass API authentication and authorization. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added this vulnerability to its Known Exploited Vulnerabilities catalog, urging federal agencies to apply the patch by April 9.
Trendline Trendline
Flowise Vulnerability Exploited by Attackers, Posing Security Risks

Flowise Vulnerability Exploited by Attackers, Posing Security Risks

Flowise Vulnerability Exploited by Attackers, Posing Security Risks
Trendline Trendline
Fortinet Releases Emergency Patch for Critical FortiClient EMS Vulnerability Exploited in Attacks

Fortinet Releases Emergency Patch for Critical FortiClient EMS Vulnerability Exploited in Attacks

Fortinet Releases Emergency Patch for Critical FortiClient EMS Vulnerability Exploited in Attacks
Trendline Trendline
Fortinet Releases Patch for Critical FortiClient EMS Vulnerability Exploited in the Wild

Fortinet Releases Patch for Critical FortiClient EMS Vulnerability Exploited in the Wild

Fortinet Releases Patch for Critical FortiClient EMS Vulnerability Exploited in the Wild