FortiClient / EMS 7.4 vulnerabilities
5 advisories affect Fortinet FortiClient / EMS 7.4, 2 already exploited by attackers. Latest: September 8, 2026.
Running FortiClient / EMS 7.4 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on FortiClient / EMS 7.4 alerts
Turn on FortiClient / EMS 7.4 alerts
| Vulnerability | Severity | Affected versions |
|---|---|---|
| Fortinet: Arbitrary process termination from exposed minifilter communication port FG-IR-26-165 · September 8, 2026 | Medium 5.1 | from 7.4.0 to 7.4.7 Fixed in 7.4.8 |
| Fortinet: Heap overflow in kernel driver due to missing size validation FG-IR-26-156 · August 12, 2026 | High 7.3 | from 7.4.0 to 7.4.3 Fixed in 7.4.4 |
| Fortinet: Missed certificate verification in AD Connector communication with FortiClient EMS FG-IR-26-147 · July 14, 2026 | High 7.5 | from 7.4.0 to 7.4.1; from 7.4.3 to 7.4.5 Fixed in 7.4.6 |
| Fortinet FortiClient EMS SQL Injection Vulnerability CVE-2026-21643 · April 13, 2026 | Critical 9.8 Exploited | 7.4.4 |
| Fortinet FortiClient EMS Improper Access Control Vulnerability CVE-2026-35616 · April 6, 2026 | Critical 9.8 Exploited | from 7.4.5 to 7.4.6 |
Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.
Other FortiClient / EMS versions: 7.2