FO
Product
FortiClientEMS
On CISA KEVExploited in the wildRansomware-linked
21
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 6Medium 10Low 0
Watch
Add FortiClientEMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-35616 In wildKEV | 9.8 | Apr 4 | Fortinet FortiClient EMS Improper Access Control Vulnerability Affected: 7.4.5 through 7.4.6 |
| CVE-2026-21643 In wildKEV | 9.8 | Feb 6 | Fortinet FortiClient EMS SQL Injection Vulnerability Affected: 7.4.4 |
| CVE-2023-48788 RansomwareIn wildKEV | 9.8 | Mar 12 | Fortinet FortiClient EMS SQL Injection Vulnerability Affected: 7.2.0 through 7.2.2; 7.0.1 through 7.0.10 |
| CVE-2026-59836 | 9.8 | Jul 14 | A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow… Affected: 7.4.3 through 7.4.5; 7.4.0 through 7.4.1; 7.2.12 through 7.2.14; 7.2.0 through 7.2.10 |
| CVE-2024-23106 | 9.8 | Jan 14 | An improper restriction of excessive authentication attempts [CWE-307] in FortiClientEMS version 7.2.0 through 7.2.4 and before 7.0.10 allows an unauthenticated attacker to try a… Affected: 6.2.0 through 6.2.9; 6.4.0 through 6.4.9; 7.0.0 before 7.0.11; 7.2.0 before 7.2.5 |
Showing 5