Dossier
CVE-2026-35616
Coverage of CVE-2026-35616 in the Nexus archive.
- Hackers exploit FortiClient EMS flaw to push infostealer malware
Hackers are exploiting an authentication bypass vulnerability (CVE-2026-35616) in FortiClient Enterprise Management Server (EMS) to deliver an undocumented credential stealer called EKZ.
- Fortinet Issues Emergency Patch for FortiClient Zero-Day
Fortinet has issued an emergency patch for a zero-day vulnerability in FortiClient, tracked as CVE-2026-35616, which allows authentication bypass. This flaw is part of a series of Fortinet vulnerabilities that have been exploited in the wild.