CVE Watch—

CVE-2026-21643

Fortinet FortiClient EMS SQL Injection Vulnerability

CVSS

—

Sin CVSS

EPSS

94.1%

p100

KEV

SÍ

13 abr 2026

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

94.1%EPSS · 30 días94.1%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

Fortinet / FortiClient EMS

Vulnerabilidad

Fortinet FortiClient EMS SQL Injection Vulnerability

Añadido a KEV

13 abr 2026

Remediar antes de

16 abr 2026

Uso conocido en ransomware

Descripción resumida

Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://fortiguard.fortinet.com/psirt/FG-IR-25-1142 ; https://nvd.nist.gov/vuln/detail/CVE-2026-21643

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2023-48788—

99.9%

KEV—80Fortinet FortiClient EMS SQL Injection Vulnerability—CVE-2026-35616—

99.8%

KEV—80Fortinet FortiClient EMS Improper Access Control Vulnerability—