CVE-2026-35616

Beskrivelse

A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.

Beskrivelsen gjengis slik kilden har publisert den, på engelsk.

Berørte produkter

Svakhetstype

• CWE-284: Improper Access Control

  The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Angrepsteknikker

Utledet gjennom svakhetstypen: CVE til CWE til CAPEC til ATT&CK. Dette viser hvilke teknikker svakhetsklassen historisk brukes til. Det er ikke en påstand om at nettopp denne sårbarheten er utnyttet slik.

• T1014: Rootkit stealth
• T1027.009: Embedded Payloads stealth
• T1037: Boot or Logon Initialization Scripts persistence, privilege-escalation
• T1080: Taint Shared Content lateral-movement
• T1505.005: Terminal Services DLL persistence
• T1542.003: Bootkit stealth, persistence
• T1543: Create or Modify System Process persistence, privilege-escalation
• T1543.001: Launch Agent persistence, privilege-escalation
• T1543.003: Windows Service persistence, privilege-escalation
• T1543.004: Launch Daemon persistence, privilege-escalation
• T1546.001: Change Default File Association privilege-escalation, persistence
• T1546.004: Unix Shell Configuration Modification privilege-escalation, persistence
• T1546.008: Accessibility Features privilege-escalation, persistence
• T1546.016: Installer Packages privilege-escalation, persistence
• T1547: Boot or Logon Autostart Execution persistence, privilege-escalation
• T1547.006: Kernel Modules and Extensions persistence, privilege-escalation
• T1553.004: Install Root Certificate defense-impairment
• T1556.006: Multi-Factor Authentication defense-impairment, persistence, credential-access
• T1574.011: Services Registry Permissions Weakness stealth, execution

Referanser

• https://fortiguard.fortinet.com/psirt/FG-IR-26-099 Patch, Vendor Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-35616 US Government Resource