CVE-2026-35616 FortiClient EMS Auth Bypass via Certificate Header Anomaly

Ibrahim Saud@tektrix

•updated Jul 3, 2026•2•0•13

Detects instances where FortiClient EMS (versions 7.4.5 or 7.4.6) logs a 'Certificate not found in request header' error. This indicates that a client attempt to communicate with the EMS server failed due to missing certificate-based authentication, which could suggest misconfiguration, network issues, or potentially an unauthorized attempt to access the management interface.