Hackers exploit a FortiClient EMS vulnerability to deliver infostealer malware

Attackers are exploiting the CVE-2026-35616 authentication-bypass vulnerability in FortiClient Enterprise Management Server (EMS) to deliver the undocumented EKZ infostealer.