CVE Watch—

CVE-2026-21643

Fortinet FortiClient EMS SQL Injection Vulnerability

CVSS

—

No CVSS

EPSS

94.1%

p100

KEV

YES

Apr 13, 2026

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

94.1%EPSS · 30 days94.1%

2026-06-302026-07-16

KEV catalog record

Product

Fortinet / FortiClient EMS

Vulnerability

Fortinet FortiClient EMS SQL Injection Vulnerability

Added to KEV

Apr 13, 2026

Remediate by

Apr 16, 2026

Known ransomware use

Summary description

Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://fortiguard.fortinet.com/psirt/FG-IR-25-1142 ; https://nvd.nist.gov/vuln/detail/CVE-2026-21643

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2023-48788—

99.9%

KEV—80Fortinet FortiClient EMS SQL Injection Vulnerability—CVE-2026-35616—

99.8%

KEV—80Fortinet FortiClient EMS Improper Access Control Vulnerability—