Hardcoded Crypto Key in FortiClientEMS 7.4.07.4.5 Enables Info Disclosure
CVE-2026-39810 Published on April 14, 2026
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to information disclosure via decrypting database dump.
Vulnerability Analysis
CVE-2026-39810 is exploitable with local system access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality and integrity, and no impact on availability.
Weakness Type
Use of Hard-coded Cryptographic Key
The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered.
Products Associated with CVE-2026-39810
Want to know whenever a new CVE is published for Fortinet Forticlientems? stack.watch will email you.
Affected Versions
Fortinet FortiClientEMS:- Version 7.4.3, <= 7.4.5 is affected.
- Version 7.4.0, <= 7.4.1 is affected.