PT-2026-58074 · Fortinet · Forticlientems

Published 2026-07-14 · Updated 2026-07-14 · CVE-2026-59836

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FortiClientEMS versions 7.4.3 through 7.4.5 FortiClientEMS versions 7.4.0 through 7.4.1 FortiClientEMS 7.2 (affected versions not specified)

Description An improper certificate validation issue exists which may allow an attacker to achieve information disclosure. Improper certificate validation occurs when a system fails to properly verify the authenticity of a digital certificate, potentially allowing an unauthorized party to impersonate a trusted entity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2026-59836

Affected Products

Forticlientems

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-59836 · Security Note
• https://fortiguard.fortinet.com/psirt/FG-IR-26-147 · Vendor Advisory
• https://twitter.com/KaitanSecurity/status/2077068128907927565 · Twitter Post