CVE-2026-59836
published 2026-07-14CVE-2026-59836: A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all…
PriorityP353critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.22%
12.0th percentile
A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow attacker to information disclosure via
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fortinet | forticlientems | — | — |
| fortinet | forticlientems | 7.2.0 – 7.4.1 | — |
| fortinet | forticlientems | 7.2.12 – 7.2.14 | — |
| fortinet | forticlientems | 7.4.0 – 7.4.1 | — |
| fortinet | forticlientems | >= 7.4.3 < 7.4.6 | 7.4.6 |
| fortinet | forticlientems | 7.4.3 – 7.4.5 | — |
| fortinet | fortinet | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow attacker to information di
ghsa_unreviewed·2026-07-14
CVE-2026-59836 [HIGH] CWE-295 A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow attacker to information di
A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow attacker to information disclosure via
Fortinet
Missed certificate verification in AD Connector communication with FortiClient EMS
vendor_fortinet·2026-07-14·CVSS 7.5
CVE-2026-59836 [HIGH] CWE-295 Missed certificate verification in AD Connector communication with FortiClient EMS
FG-IR-26-147: Missed certificate verification in AD Connector communication with FortiClient EMS
A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow attacker to information disclosure via
CVEs: CVE-2026-59836
CWEs: CWE-295
CVSS: 7.5 (high)
Affected products: FortiClientEMS, Fortinet
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-07-14
Published