Fortinet FortiClient EMS vulnerabilities

14 CVEs affecting Fortinet FortiClient EMS, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-59836, published 2026-07-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-21643: Fortinet FortiClient EMS SQL Injection Vulnerability, published 2026-02-06. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2026-04-13. EPSS: 93.9% chance of exploitation in the next 30 days. An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized…
CVE-2026-35616: Fortinet FortiClient EMS Improper Access Control Vulnerability, published 2026-04-04. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2026-04-06. EPSS: 9.1% chance of exploitation in the next 30 days. A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.
CVE-2025-59922, published 2026-01-13. High severity, CVSS 7.2. EPSS: 7.8% chance of exploitation in the next 30 days. An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.4, FortiClientEMS 7.4.0…
CVE-2024-23106, published 2025-01-14. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. An improper restriction of excessive authentication attempts [CWE-307] in FortiClientEMS version 7.2.0 through 7.2.4 and before 7.0.10 allows an unauthenticated attacker to try a brute force attack…
CVE-2024-36510, published 2025-01-14. Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days. An observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, and FortiSOAR 7.5.0, 7.4.0 through 7.4.4, 7.3.0 through 7.3.2, 7.2 all…
CVE-2025-22859, published 2025-05-13. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. A Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and FortiClientEMS Cloud 7.4.0 through 7.4.1 may allow a remote unauthenticated attacker to perform a limited…
CVE-2024-36506, published 2025-01-14. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. An improper verification of source of a communication channel vulnerability [CWE-940] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, 6.4 all versions may allow a remote attacker to…
CVE-2025-22855, published 2025-04-08. Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days. An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Fortinet FortiClient before 7.4.1 may allow the EMS administrator to send messages…
CVE-2023-48786, published 2025-06-10. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. A server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0 through 7.4.2 and before 7.2.6 may allow an authenticated attacker to perform internal requests via…
CVE-2024-32119, published 2025-06-10. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthenticated attacker with the knowledge of the targeted user's FCTUID and…

Latest

CVE-2026-59836, published 2026-07-14. Critical severity, CVSS 9.8. EPSS: 0.2% chance of exploitation in the next 30 days. A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow attacker to information…
CVE-2026-39810, published 2026-04-14. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to information disclosure via decrypting database dump.
CVE-2026-39809, published 2026-04-14. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5, FortiClientEMS 7.2.0 through 7.2.12,…