CVE-2026-35616: Fortinet fixes actively exploited high-severity flaw
2026-04-06T08:51:52Z•3c2784edb607195b3f53f61376c2cf864eaa4ff2acfa550d98d665fb9898a8c0
CISA KEVCVE-2026-3502CVE-2026-35616CrystalX RATFortiClient EMSFortinetHandalaMaaSNorth KoreaPSK WindQilinTeamPCPTrueConfactive exploitationaxioscloud breachcryptocurrency heistemail malwareinfostealernpmransomwaresupply chain attack
What happened
The feed highlights multiple high-impact security incidents and malware developments. Fortinet released out-of-band patches for a critical FortiClient EMS authentication bypass (CVE-2026-35616, CVSS 9.1) actively exploited in the wild. CISA added TrueConf Client flaw CVE-2026-3502 (CVSS 7.8) to its Known Exploited Vulnerabilities catalog. Separately, CERT-EU linked a European Commission cloud breach to TeamPCP, exposing data from ~30 EU entities. A $285M cryptocurrency drain from Drift—likely North Korea–linked—used advanced nonce/pre-sign and multisig techniques. The Qilin ransomware group is
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 3c2784edb607195b3f53f61376c2cf864eaa4ff2acfa550d98d665fb9898a8c0
- Enrichment time
- 2026-04-06T08:51:52Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.