Tag: CVE-2026-35616

1 Attack Reports | 1 Vulnerabilities

Attack reports

FortiClient EMS Exploited via CVE-2026-35616 to Deliver EKZ Infostealer Disguised as a Fortinet Patch

In May 2026, threat actors exploited CVE-2026-35616, an improper access control vulnerability in FortiClient Endpoint Management Server (EMS), to bypass API authentication and execute privileged requests without credentials. Attackers leveraged trusted endpoint management infrastructure to push mal…
forticlient ems
CVE-2026-35616
2026-05-28
ekz infostealer
endpoint exploitation
vpn configuration abuse
Published: May 28, 2026
Linked vulnerabilities : CVE-2026-35616 (CVSS 9.8), CVE-2026-0300 (CVSS 9.3)
Downloadable IOCs: 5
Click here to see more Attack Reports

Vulnerabilities

CVE-2026-35616

9.8
    Fortinet
  • Forticlientems
Published: April 4, 2026
Click here to see more Vulnerabilities