Skip to content

CyberSIXT Search

Vendor · coverage timeline

FortiClient EMS

24 articles from 7 outlets between 9 Feb and 23 Oct. First reported by SecurityOnline. The busiest day was Mon 6 Apr, with 6 articles.

Articles: 24; all time · from 7 outlets
Days covered: 14; of 257 days · all time
Busiest day: 6; articles on Mon 6 Apr
Last 7 days: 0.4a day; vs 0.1 a day · previous 7 days
First report: 9 Feb; SecurityOnline
CVEs tracked: 44; 32 in CISA KEV · all time

Coverage over time

24 articles · 9 Feb – 23 Oct

6 AprAdded to CISA KEV · CVE-2026-35616FortiClient EMS
13 AprAdded to CISA KEV · CVE-2026-21643FortiClient EMS
9 FebFirst report9 Feb · SecurityOnline

Show as table

FortiClient EMS: articles per day
Day (UTC)	Articles	Outlets
Mon 9 Feb	2	SecurityOnline 1, Security Affairs 1
Tue 10 Feb	1	The Hacker News 1
Wed 11 Feb	1	SecurityWeek 1
Mon 30 Mar	1	Security Affairs 1
Tue 31 Mar	1	SecurityWeek 1
Sun 5 Apr	1	The Hacker News 1
Mon 6 Apr	6	CISA 2, Security Affairs 1, SecurityWeek 1, SOCRadar 1, Dark Reading 1
Tue 7 Apr	1	CISA 1
Wed 8 Apr	1	Security Affairs 1
Mon 13 Apr	2	CISA 2
Tue 14 Apr	1	The Hacker News 1
Thu 28 May	3	SecurityOnline 1, SecurityWeek 1, Security Affairs 1
Tue 20 Oct	1	SOCRadar 1
Fri 23 Oct	2	SecurityOnline 1, The Hacker News 1

Articles

24 articles

Fri 23 Oct2 articles

18:36
AI Agents Power Ransomware Affiliates’ Attacks on Edge DevicesThe Hacker News
08:35
INC Ransomware Exposed Using AI and Custom Malware Against VictimsSecurityOnline

Tue 20 Oct1 article

11:56
AI-Driven Ransomware Campaign Targeted 62 OrganisationsSOCRadar

Thu 28 May3 articles

16:31
FortiClient EMS flaw used to deploy EKZ Infostealer via fake patchSecurity Affairs
13:00
FortiClient EMS bug exploited to deliver EKZ InfostealerSecurityWeek
06:32
FortiClient EMS flaw used to drop EKZ Infostealer via fake updatesSecurityOnline

Tue 14 Apr1 article

06:31
CISA adds six KEV flaws amid active Fortinet exploitsThe Hacker News

Mon 13 Apr2 articles

22:05
CISA adds critical Fortinet FortiClient EMS SQLi flaw to KEV listCISA · official notice
21:37
CISA adds critical Fortinet FortiClient EMS SQLi flaw to KEV listCISA · official notice

Wed 8 Apr1 article

22:34
CISA adds critical Ivanti EPMM flaw to KEV after PoC releaseSecurity Affairs

Tue 7 Apr1 article

00:38
CISA Warns of Fortinet FortiClient EMS Flaw Allowing RCECISA · official notice

Mon 6 Apr6 articles

21:11
Fortinet issues fix for FortiClient EMS zero day CVE-2026-35616Dark Reading
19:32
CISA Adds CVE-2026-35616 to Known Exploited Vulnerabilities CatalogueCISA · official notice
17:08
CISA Adds Fortinet FortiClient EMS Flaw CVE-2026-35616 to KEVCISA · official notice
15:27
Fortinet warns of critical CVE-2026-35616 flaw in FortiClient EMSSOCRadar
09:51
Fortinet Rushes Emergency Fixes for Exploited Zero-DaySecurityWeek
06:01
CVE-2026-35616: Fortinet fixes actively exploited high-severity flawSecurity Affairs

Sun 5 Apr1 article

05:51
Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMSThe Hacker News

Tue 31 Mar1 article

11:50
Exploitation of Critical Fortinet FortiClient EMS Flaw BeginsSecurityWeek

Mon 30 Mar1 article

11:09
Critical Fortinet FortiClient EMS flaw exploited for Remote Code ExecutionSecurity Affairs

Wed 11 Feb1 article

10:05
Fortinet Patches High-Severity VulnerabilitiesSecurityWeek

Tue 10 Feb1 article

06:35
Fortinet Patches Critical SQLi Flaw Enabling Unauthenticated Code ExecutionThe Hacker News

Mon 9 Feb2 articles

21:55
Critical Fortinet FortiClientEMS flaw allows remote code executionSecurity Affairs
04:35
Endpoint Exposed: Critical FortiClient EMS Flaw (CVSS 9.1) Allows Unauthenticated RCESecurityOnline · first report