Exploit for Improper Access Control in Fortinet Forticlientems

CVE-2026-35616 - FortiClient EMS Pre-Authentication API Bypass...

Fortinet FortiClient Enterprise Management Server Insufficient Source Verification

The vulnerability of the Fortinet FortiClient Enterprise Management Server EMS and the FortiClient EMS Cloud cloud storage service is related to insufficient verification of the connection source. Exploiting this vulnerability allows a malicious actor to replace the trusted host...

Fortinet FortiClient Enterprise Management Server SQL Injection

The vulnerability of the Fortinet FortiClient Enterprise Management Server EMS server relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted SQL query remotely...

Fortinet FortiClient Enterprise Management Server Data Cleaning Code Execution

The vulnerability of the Fortinet FortiClient Enterprise Management Server EMS and the FortiClient EMS Cloud cloud storage service is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Fortinet FortiClient Enterprise Management Server Path Traversal DoS

The vulnerability of the Fortinet FortiClient Enterprise Management Server EMS server relates to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to perform maintenance actions, read from or write to a limited number of...

Fortinet FortiClient Enterprise Management Server CSV Injection

The vulnerability of the Fortinet FortiClient Enterprise Management Server EMS lies in the absence of mechanisms for neutralizing elements in CSV files. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes or commands by sending specially crafted packets...

Fortinet FortiClient Enterprise Management Server Certificate Validation Man-in-the-Middle

The vulnerability of the Fortinet FortiClient Enterprise Management Server EMS server is related to authentication errors. Exploiting this vulnerability allows a malicious actor to carry out “man-in-the-middle” attacks and expose the protected information...

FortiClientEMSOnlineInstaller.exe Code Execution

The vulnerability of the installation file FortiClientEMSOnlineInstaller.exe of the Fortinet FortiClient Enterprise Management Server EMS server is related to errors in the path validation mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially...

CVE-2020-9287

An Unsafe Search Path vulnerability in FortiClient EMS online installer 6.2.1 and below may allow a local attacker with control over the directory in which FortiClientEMSOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that...