References https://fortiguard.fortinet.com/psirt/FG-IR-26-099 https://nvd.nist.gov/vuln/detail/CVE-2026-35616 https://www.ithome.com.tw/news/175042 https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alert_Announcements/bbef73a5-af50-47dd-b70f-caad165fbef3/ https://thehackernews.com/2026/04/fortinet-patches-actively-exploited-cve.html https://app.opencve.io/cve/?product=forticlient&vendor=fortinet https://www.ithome.com.tw/news/174790 https://avd.aliyun.com/detail?id=AVD-2023-45590 https://www.hkcert.org/tc/security-bulletin/fortinet-forticlient-sensitive-information-disclosure-vulnerability https://fortiguard.fortinet.com/psirt/FG-IR-26-099
Related VulnerabilitiesPoCCVE-2026-21643: Fortinet FortiClientEMS 7.4.4 - SQL InjectionPoCCVE-2026-35616: FortiClient EMS - Authentication BypassPoCCVE-2023-48788: Fortinet Forticlient Endpoint Management Server - SQL InjectionFortiClient EMS CVE-2023-48788 SQL注入漏洞Fortinet FortiClient Enterprise Management Server 跨站脚本漏洞FortiClient SSLVPN特权提升漏洞Fortinet FortiClient SSLVPN 信息泄露漏洞Fortinet FortiClient Linux SSLVPN 权限许可和访问控制漏洞Fortinet FortiClient SSLVPN Linux Client 本地提权漏洞