Critical FortiClient EMS Vulnerability Enables Remote Code Execution

CERT-Bund published a security advisory regarding CVE-2026-0962, a critical remote code execution vulnerability in Fortinet FortiClient EMS. The vulnerability affects all versions prior to 7.4.7 and has a CVSS Base Score of 9.8, indicating critical severity. An unauthenticated remote attacker can exploit this flaw to execute arbitrary code on affected systems.

Organizations using FortiClient EMS must prioritize immediate remediation by upgrading to version 7.4.7 or later. Where patching cannot be performed promptly, organizations should implement mitigating controls to reduce exposure, such as restricting network access to management interfaces and monitoring for indicators of compromise. This vulnerability poses significant risk to enterprise networks given the software's role in endpoint protection and VPN connectivity.