CVE-2026-39810CWE-321

A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to information disclosure via decrypting…

Medium · published April 14, 2026

CVSS v3.1
5.2
EPSS
0%
Percentile
3.6
In the wild
Unconfirmed
What it is

A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to information disclosure via decrypting database dump.

The record
Technical detail
CVSS v3.1
5.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00147 · 3.6th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2026-04-14T15:38Z
EPSS history
Timeline
  • 14 APR 15:38Z
    A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to information disclosure via decrypting…
    cvelistv5