https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 12 Jul 2026 17:59:49 +0000 https://vulnerability.circl.lu/sighting/77cce9dc-5300-4361-b00f-338c146eaecb/export {"uuid": "77cce9dc-5300-4361-b00f-338c146eaecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2698", "content": "\ud83d\udd14 A PoC/exploit has been discovered for vulnerability CVE-2026-35616\n\nPT ID: PT-2026-30288\n\nVendor: Fortinet\nProduct: FortiClientEMS\nDescription: A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.\n\nLink: https://github.com/Alaatk/CVE-2026-35616", "creation_timestamp": "2026-07-12T00:00:52.688504Z"} {"uuid": "77cce9dc-5300-4361-b00f-338c146eaecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2698", "content": "\ud83d\udd14 A PoC/exploit has been discovered for vulnerability CVE-2026-35616\n\nPT ID: PT-2026-30288\n\nVendor: Fortinet\nProduct: FortiClientEMS\nDescription: A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.\n\nLink: https://github.com/Alaatk/CVE-2026-35616", "creation_timestamp": "2026-07-12T00:00:52.688504Z"} https://vulnerability.circl.lu/sighting/77cce9dc-5300-4361-b00f-338c146eaecb/export Sun, 12 Jul 2026 00:00:52 +0000 https://vulnerability.circl.lu/sighting/a1d23421-4dfa-4219-bb54-9ab886da9b6c/export {"uuid": "a1d23421-4dfa-4219-bb54-9ab886da9b6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2698", "content": "\ud83d\udd14 A PoC/exploit has been discovered for vulnerability CVE-2026-35616\n\nPT ID: PT-2026-30288\n\nVendor: Fortinet\nProduct: FortiClientEMS\nDescription: A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.\n\nLink: https://github.com/Alaatk/CVE-2026-35616", "creation_timestamp": "2026-07-11T10:00:06.095766Z"} {"uuid": "a1d23421-4dfa-4219-bb54-9ab886da9b6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2698", "content": "\ud83d\udd14 A PoC/exploit has been discovered for vulnerability CVE-2026-35616\n\nPT ID: PT-2026-30288\n\nVendor: Fortinet\nProduct: FortiClientEMS\nDescription: A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.\n\nLink: https://github.com/Alaatk/CVE-2026-35616", "creation_timestamp": "2026-07-11T10:00:06.095766Z"} https://vulnerability.circl.lu/sighting/a1d23421-4dfa-4219-bb54-9ab886da9b6c/export Sat, 11 Jul 2026 10:00:06 +0000 https://vulnerability.circl.lu/sighting/872235f5-00d1-4126-bab4-079fc9f65c19/export {"uuid": "872235f5-00d1-4126-bab4-079fc9f65c19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mqcjs5elyq26", "content": "~Recordedfuture~\nInsikt Group identified 60 high-impact vulnerabilities in June 2026, with 30 rated Very Critical and 23 listed in CISA's KEV catalog.\n-\nIOCs: CVE-2026-35616, CVE-2025-55182, CVE-2026-50751\n-\n#CVE #ThreatIntel #VulnManagement", "creation_timestamp": "2026-07-10T16:07:34.108535Z"} {"uuid": "872235f5-00d1-4126-bab4-079fc9f65c19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mqcjs5elyq26", "content": "~Recordedfuture~\nInsikt Group identified 60 high-impact vulnerabilities in June 2026, with 30 rated Very Critical and 23 listed in CISA's KEV catalog.\n-\nIOCs: CVE-2026-35616, CVE-2025-55182, CVE-2026-50751\n-\n#CVE #ThreatIntel #VulnManagement", "creation_timestamp": "2026-07-10T16:07:34.108535Z"} https://vulnerability.circl.lu/sighting/872235f5-00d1-4126-bab4-079fc9f65c19/export Fri, 10 Jul 2026 16:07:34 +0000 https://vulnerability.circl.lu/sighting/8ba33c06-cd27-42ef-9fe4-bbd1257841c9/export {"uuid": "8ba33c06-cd27-42ef-9fe4-bbd1257841c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "seen", "source": "https://t.me/brutsecurity/2698", "content": "\ud83d\udd14 A PoC/exploit has been discovered for vulnerability CVE-2026-35616\n\nPT ID: PT-2026-30288\n\nVendor: Fortinet\nProduct: FortiClientEMS\nDescription: A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.\n\nLink: https://github.com/Alaatk/CVE-2026-35616", "creation_timestamp": "2026-07-10T00:00:12.311384Z"} {"uuid": "8ba33c06-cd27-42ef-9fe4-bbd1257841c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "seen", "source": "https://t.me/brutsecurity/2698", "content": "\ud83d\udd14 A PoC/exploit has been discovered for vulnerability CVE-2026-35616\n\nPT ID: PT-2026-30288\n\nVendor: Fortinet\nProduct: FortiClientEMS\nDescription: A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.\n\nLink: https://github.com/Alaatk/CVE-2026-35616", "creation_timestamp": "2026-07-10T00:00:12.311384Z"} https://vulnerability.circl.lu/sighting/8ba33c06-cd27-42ef-9fe4-bbd1257841c9/export Fri, 10 Jul 2026 00:00:12 +0000 https://vulnerability.circl.lu/sighting/7c1f4bba-d356-4fcd-bc5d-845dbc397430/export {"uuid": "7c1f4bba-d356-4fcd-bc5d-845dbc397430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "seen", "source": "https://t.me/brutsecurity/2698", "content": "\ud83d\udd14 A PoC/exploit has been discovered for vulnerability CVE-2026-35616\n\nPT ID: PT-2026-30288\n\nVendor: Fortinet\nProduct: FortiClientEMS\nDescription: A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.\n\nLink: https://github.com/Alaatk/CVE-2026-35616", "creation_timestamp": "2026-07-09T03:00:05.104322Z"} {"uuid": "7c1f4bba-d356-4fcd-bc5d-845dbc397430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "seen", "source": "https://t.me/brutsecurity/2698", "content": "\ud83d\udd14 A PoC/exploit has been discovered for vulnerability CVE-2026-35616\n\nPT ID: PT-2026-30288\n\nVendor: Fortinet\nProduct: FortiClientEMS\nDescription: A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.\n\nLink: https://github.com/Alaatk/CVE-2026-35616", "creation_timestamp": "2026-07-09T03:00:05.104322Z"} https://vulnerability.circl.lu/sighting/7c1f4bba-d356-4fcd-bc5d-845dbc397430/export Thu, 09 Jul 2026 03:00:05 +0000 https://vulnerability.circl.lu/sighting/ac97e9ca-ba92-4a06-8deb-a30361f251c3/export {"uuid": "ac97e9ca-ba92-4a06-8deb-a30361f251c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "seen", "source": "https://bsky.app/profile/giuliosistilli.bsky.social/post/3mq5z6kpk3i23", "content": "Fortinet releases out-of-band patch for critical CVE-2026-35616, a pre-authentication API access bypass vulnerability with CVSS 9.1, actively exploited in the wild\n\nRead more", "creation_timestamp": "2026-07-08T21:00:03.007367Z"} {"uuid": "ac97e9ca-ba92-4a06-8deb-a30361f251c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "seen", "source": "https://bsky.app/profile/giuliosistilli.bsky.social/post/3mq5z6kpk3i23", "content": "Fortinet releases out-of-band patch for critical CVE-2026-35616, a pre-authentication API access bypass vulnerability with CVSS 9.1, actively exploited in the wild\n\nRead more", "creation_timestamp": "2026-07-08T21:00:03.007367Z"} https://vulnerability.circl.lu/sighting/ac97e9ca-ba92-4a06-8deb-a30361f251c3/export Wed, 08 Jul 2026 21:00:03 +0000 https://vulnerability.circl.lu/sighting/4418beda-e0f2-4b97-82b4-e84bc028c595/export {"uuid": "4418beda-e0f2-4b97-82b4-e84bc028c595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mpjtszdadh22", "content": "eSentire TRU reported EKZ Stealer abusing CVE-2026-35616 in Fortinet EMS 7.4.5-7.4.6, disguised as FortiEndpoint_Patch.exe to steal browser creds and exfiltrate via PowerShell. #Fortinet #EKZStealer #BinaryNinja", "creation_timestamp": "2026-06-30T20:30:27.695273Z"} {"uuid": "4418beda-e0f2-4b97-82b4-e84bc028c595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mpjtszdadh22", "content": "eSentire TRU reported EKZ Stealer abusing CVE-2026-35616 in Fortinet EMS 7.4.5-7.4.6, disguised as FortiEndpoint_Patch.exe to steal browser creds and exfiltrate via PowerShell. #Fortinet #EKZStealer #BinaryNinja", "creation_timestamp": "2026-06-30T20:30:27.695273Z"} https://vulnerability.circl.lu/sighting/4418beda-e0f2-4b97-82b4-e84bc028c595/export Tue, 30 Jun 2026 20:30:27 +0000 https://vulnerability.circl.lu/sighting/62c57a2c-5490-49b4-832b-f00e27d0a3f0/export {"uuid": "62c57a2c-5490-49b4-832b-f00e27d0a3f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-35616", "type": "seen", "source": "https://www.acn.gov.it/portale/w/fortibleed-esposizione-di-credenziali-ssl-vpn-associate-a-dispositivi-fortinet-esposti-su-internet", "content": "", "creation_timestamp": "2026-06-25T16:45:25.318811Z"} {"uuid": "62c57a2c-5490-49b4-832b-f00e27d0a3f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-35616", "type": "seen", "source": "https://www.acn.gov.it/portale/w/fortibleed-esposizione-di-credenziali-ssl-vpn-associate-a-dispositivi-fortinet-esposti-su-internet", "content": "", "creation_timestamp": "2026-06-25T16:45:25.318811Z"} https://vulnerability.circl.lu/sighting/62c57a2c-5490-49b4-832b-f00e27d0a3f0/export Thu, 25 Jun 2026 16:45:25 +0000 https://vulnerability.circl.lu/sighting/07b68963-892b-4978-b337-5a1a93eb64cc/export {"uuid": "07b68963-892b-4978-b337-5a1a93eb64cc", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f8f3d670-254d-4431-9df1-bc00754bbc93", "content": "", "creation_timestamp": "2026-06-23T14:03:40.492033Z"} {"uuid": "07b68963-892b-4978-b337-5a1a93eb64cc", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f8f3d670-254d-4431-9df1-bc00754bbc93", "content": "", "creation_timestamp": "2026-06-23T14:03:40.492033Z"} https://vulnerability.circl.lu/sighting/07b68963-892b-4978-b337-5a1a93eb64cc/export Tue, 23 Jun 2026 14:03:40 +0000 https://vulnerability.circl.lu/sighting/6a1b1317-89d0-42d0-9034-fc82830428c5/export {"uuid": "6a1b1317-89d0-42d0-9034-fc82830428c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3moxhl2vwrc2n", "content": "\u30cf\u30c3\u30ab\u30fc\u304cFortiClient EMS\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3001\u60c5\u5831\u7a83\u76d7\u30de\u30eb\u30a6\u30a7\u30a2\u3092\u62e1\u6563\n\n\u30cf\u30c3\u30ab\u30fc\u306f\u3001FortiClient Enterprise Management Server (EMS) \u306e\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u8106\u5f31\u6027 (CVE-2026-35616) \u3092\u60aa\u7528\u3057\u3001EKZ \u3068\u547c\u3070\u308c\u308b\u672a\u516c\u958b\u306e\u8a8d\u8a3c\u60c5\u5831\u7a83\u76d7\u30de\u30eb\u30a6\u30a7\u30a2\u3092\u914d\u5e03\u3057\u3066\u3044\u307e\u3059\u3002\n\n\u653b\u6483\u8005\u306f\u30de\u30eb\u30a6\u30a7\u30a2\u3092Fortinet\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306b\u898b\u305b\u304b\u3051\u3001FortiClient\u306b\u3088\u3063\u3066\u7ba1\u7406\u3055\u308c\u308bVPN\u30b9\u30af\u30ea\u30d7\u30c8\u30ef\u30fc\u30af\u30d5\u30ed\u30fc\u3092\u901a\u3058\u3066\u5b9f\u884c\u3057\u305f\u3002\n\n\u60aa\u7528\u3055\u308c\u305f\u91cd\u5927\u306a\u8106\u5f31\u6027\u306f\u3001\u4e0d\u9069\u5207\u306a\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u306e\u6b20\u9665\u3067\u3042\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u304c\u3001\u7279\u5225\u306b...", "creation_timestamp": "2026-06-23T13:03:25.216843Z"} {"uuid": "6a1b1317-89d0-42d0-9034-fc82830428c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3moxhl2vwrc2n", "content": "\u30cf\u30c3\u30ab\u30fc\u304cFortiClient EMS\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3001\u60c5\u5831\u7a83\u76d7\u30de\u30eb\u30a6\u30a7\u30a2\u3092\u62e1\u6563\n\n\u30cf\u30c3\u30ab\u30fc\u306f\u3001FortiClient Enterprise Management Server (EMS) \u306e\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u8106\u5f31\u6027 (CVE-2026-35616) \u3092\u60aa\u7528\u3057\u3001EKZ \u3068\u547c\u3070\u308c\u308b\u672a\u516c\u958b\u306e\u8a8d\u8a3c\u60c5\u5831\u7a83\u76d7\u30de\u30eb\u30a6\u30a7\u30a2\u3092\u914d\u5e03\u3057\u3066\u3044\u307e\u3059\u3002\n\n\u653b\u6483\u8005\u306f\u30de\u30eb\u30a6\u30a7\u30a2\u3092Fortinet\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306b\u898b\u305b\u304b\u3051\u3001FortiClient\u306b\u3088\u3063\u3066\u7ba1\u7406\u3055\u308c\u308bVPN\u30b9\u30af\u30ea\u30d7\u30c8\u30ef\u30fc\u30af\u30d5\u30ed\u30fc\u3092\u901a\u3058\u3066\u5b9f\u884c\u3057\u305f\u3002\n\n\u60aa\u7528\u3055\u308c\u305f\u91cd\u5927\u306a\u8106\u5f31\u6027\u306f\u3001\u4e0d\u9069\u5207\u306a\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u306e\u6b20\u9665\u3067\u3042\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u304c\u3001\u7279\u5225\u306b...", "creation_timestamp": "2026-06-23T13:03:25.216843Z"} https://vulnerability.circl.lu/sighting/6a1b1317-89d0-42d0-9034-fc82830428c5/export Tue, 23 Jun 2026 13:03:25 +0000