Skip to main content
Jirka1
Jirka1
Explorer II
April 7, 2026
Question

EMS FG-IR-26-099 patch and endpoint issues

  • April 7, 2026
  • 2 replies
  • 586 views

Hello,

following yesterday’s application of the EMS 7.4.6 patch on the VM (https://docs.fortinet.com/document/forticlient/7.4.6/ems-release-notes/832484), we have identified today that the majority of PCs/laptops with FortiClient versions 7.4.5 and 7.4.6 are experiencing an issue where the FortiClient Network Access Control process is utilizing 100% of the disk.

 

image.png


Before applying the CVE patch, we did not observe this issue.


A simple restart of the affected PCs did not resolve the problem. We also attempted to restart EMS, but the issue persisted. On the endpoints we are only using Telemetry, Vulnerability Scan, and VPN access.


As a workaround, we tested disconnecting telemetry, generating a new invitation, and reconnecting telemetry — after which the disk utilization returned to normal.

Are others experiencing similar issues?

Jirka


    2 replies

    dfcruz
    dfcruz
    New Member
    April 9, 2026

    We are also experience this issue after upgrading FortiEMS to 7.4.6 and all the clients as well to 7.4.6. I have 650 users connected via telemetry .. but the funny part is that only some users are experience that.. but everyday we have some users. As workaround disconnect telemetry and connect it again yet it solves but temporarly ... after some hours .. the issue comes again ... We need this fixed as soon as possible .. anyone that can help please.

    Jirka1
    Jirka1Author
    Explorer II
    April 16, 2026

    Hey,

    any news? 

    Jirka

    Jirka1
    Jirka1Author
    Explorer II
    April 22, 2026

    Hi,

    I have identified that the issue is not caused by the EMS CVE patch, nor by EMS version 7.4.7 itself.
    The root cause appears to be FortiClient version 7.4.6.

    After downgrading FortiClient to version 7.4.5, disk utilization returned to normal.

    Has anyone experienced similar behavior?

    Thank you,
    Jirka

    Terms & ConditionsAccessibility statement