CVE-2026-39810: Medium severity Fortinet FortiClient EMS vulnerability
Published Apr 14, 2026
·Updated
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to information disclosure via decrypting database dump.
Affected Software
2 affected components
Fortinet FortiClient EMS>=7.4.0<=7.4.5
Fortinet FortiClientEMS>=7.4.0<7.4.6
Remediation
Information
Upgrade to FortiClientEMS version 7.4.6 or above
Event History
Apr 14, 2026
CVE Published
via MITRE·03:38 PM
Data Sourced
via MITRE·03:38 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-39810?
CVE-2026-39810 has been rated as a medium severity vulnerability due to the potential for information disclosure.
2
How do I fix CVE-2026-39810?
To mitigate CVE-2026-39810, upgrade Fortinet FortiClientEMS to version 7.4.6 or later.
3
What is the impact of exploiting CVE-2026-39810?
Exploiting CVE-2026-39810 may allow an attacker to gain unauthorized access to sensitive information.
4
Which versions of Fortinet FortiClientEMS are affected by CVE-2026-39810?
CVE-2026-39810 affects Fortinet FortiClientEMS versions from 7.4.0 to 7.4.5 inclusive.
5
Is there a mitigation for CVE-2026-39810 before upgrading?
There are no known mitigations for CVE-2026-39810, so upgrading is the recommended action.