Fortinet has patched a vulnerability in FortiClient EMS involving improper access control. Unauthenticated attackers can send specially crafted requests to bypass security controls and execute unauthorized code or commands. The vulnerability can be exploited remotely without authentication, leading to unauthorized system manipulation. Fortinet reports active exploitation of this vulnerability. No public proof-of-concept code exists yet, but NCSC expects public exploits soon, increasing scan traffic and large-scale abuse risks.