CVE-2026-39810: Fortinet FortiClient EMS

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to information disclosure via decrypting database dump.

Affected products

• Fortinet FortiClient EMS: from 7.4.0, before 7.4.6 (fixed in 7.4.6)

Published 2026-04-14. Last modified 2026-06-17.