Home › CVE Intelligence › CVE-2026-35616
CVSS 9.6 CRITICAL 🔴 ACTIVELY EXPLOITED SQL Injection / RCE

CVE-2026-35616: Fortinet FortiClient EMS

SQL injection in Fortinet FortiClient EMS enabling pre-authentication RCE. CISA KEV listed. Mandated emergency patch.

9.6CVSS Score
CRITICALSeverity
YESCISA KEV
SQL InjectionImpact Type

📋 Vulnerability Details

CVE IDCVE-2026-35616
VendorFortinet
Affected ProductFortiClient EMS
Vulnerability TypeSQL Injection / RCE
CVSS Score9.6 (CRITICAL)
Actively Exploited✅ Yes — CISA KEV Listed
Patch AvailableFortiClient 7.4.2
Reported ByCYBERDUDEBIVASH SENTINEL APEX Intelligence
⚡ DETECTION RULES AVAILABLE

Get CVE-2026-35616 Detection Pack

Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.

✓ Sigma Rules ✓ YARA Pack ✓ IOC Table ✓ SIEM Queries
🛡️ Get Detection Pack → 🔌 Access via API → 📖 Read Full Analysis Report →

🔗 Related Intelligence