Fortinet FortiClient EMS Improper Access Control Vulnerability

概要

参考情報

• fortiguard.fortinet.com/psirt/FG-IR-26-099 · Patch
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2026-35616

forticlientems のその他の脆弱性

• CVE-2026-59836緊急 9.8A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiCli…
• CVE-2026-39810中 5.5A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to information disclos…
• CVE-2026-39809中 6.7A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.0 throug…
• CVE-2026-21643緊急 9.8悪用確認済み（CISA KEV）An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may a…
• CVE-2025-59922高 7.2An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet For…