Fortinet customers confront actively exploited zero-day, with a full patch still pending
2026-04-07T02:51:41Z•d1a9c26909be855a9159345e9c8bdff86bedb1d65d97e966c59088f370bbfd4f
active-exploitationcve-2026-35616forticlient-emsfortinethotfixmitigationpatch-pendingsecurity-advisoryvulnerabilityzero-day
What happened
Fortinet’s FortiClient EMS has two critical vulnerabilities that have been actively exploited in the wild. Security researchers report exploitation in recent weeks; Fortinet issued an immediate hotfix but a full patch remains pending. Organizations using FortiClient EMS are urged to apply the hotfix and follow mitigations immediately. One publicly tracked identifier is CVE-2026-35616.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cyberscoop
- Record identifier
- d1a9c26909be855a9159345e9c8bdff86bedb1d65d97e966c59088f370bbfd4f
- Enrichment time
- 2026-04-07T02:51:41Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.