Research · Apr 3, 2026 · ZeroDay Catalog
Improper Access Control Vulnerability in Fortinet FortiClient EMS
A newly discovered improper access control vulnerability in Fortinet FortiClient EMS could allow unauthorized code execution by unauthenticated attackers.
What changed
Fortinet has identified an improper access control vulnerability in its FortiClient EMS versions 7.4.5 through 7.4.6. This flaw could potentially allow unauthenticated attackers to execute unauthorized code or commands through specially crafted requests.
Who is affected
Organizations utilizing Fortinet FortiClient EMS for endpoint management are at risk. This vulnerability could expose sensitive systems to unauthorized access and manipulation.
- Fortinet FortiClient EMS versions 7.4.5 to 7.4.6
- Enterprises relying on Fortinet for endpoint security solutions
- IT departments managing Fortinet products within their infrastructure
- Any organization that has not updated to the latest FortiClient EMS version
What to do
It is crucial for affected organizations to assess their exposure to this vulnerability and take immediate action to mitigate risks. Updating to the latest version of FortiClient EMS is strongly recommended.
- Upgrade FortiClient EMS to the latest version to patch the vulnerability.
- Review access control configurations to ensure they are properly implemented.
- Monitor logs for any unauthorized access attempts or unusual activity.
- Stay informed about further updates from Fortinet regarding this vulnerability.