fevar54/forticlient_ems_cve_2026_35616_poc.pyPoC de CVE-2026-35616: control de acceso indebido en FortiClient EMS.
CVSS Score: 9.1 | CWE-284: Improper Access Control
FortiClient EMS versions 7.4.5 through 7.4.6
This detector identifies whether a FortiClient EMS server is vulnerable to CVE-2026-35616, a critical authentication bypass vulnerability in the API.
An unauthenticated attacker can access sensitive API endpoints and potentially execute code or commands on the server.
⚠️ WARNING: This tool is ONLY for authorized security testing in controlled environments. Do not use it against systems you do not own.
The detector makes GET requests without authentication to known FortiClient EMS API endpoints:
200 OK → The system is VULNERABLE401 Unauthorized or 403 Forbidden → The endpoint is protected
┌─────────────────┐ GET /api/v1/system/status ┌─────────────────┐
│ Detector │ ─────────────────────────────────► │ FortiClient │
│ │ (without authentication) │ EMS │
│ │ ◄───────────────────────────────── │ │
└─────────────────┘ 200 OK → VULNERABLE! └─────────────────┘text
requests library# Clone the repository
git clone https://github.com/YOUR-USERNAME/CVE-2026-35616-Detector
cd CVE-2026-35616-Detector
# Install dependencies
pip install -r requirements.txt