Paper/Archive/CVE-2026-21643

CVE-2026-21643

Fortinet FortiClientEMS — Fortinet FortiClient EMS SQL Injection Vulnerability

KEV · due 16 Apr EPSS 98%public exploit SSVC act CVSS 9.1

CVSS 9.1 (CNA)9.1 / 10 × 3027.3 In CISA KEV+3030.0 EPSS percentile 99.9.999 × 2020.0 Exploit: SSVC active+1010.0 SSVC exploitation: active+1010.0

Description · from the CVE record

An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.

Affected

ProductAffectedFixed inSource

FortiClientEMS7.4.4–CNA

Scores by source

fortinet (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C

CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

reffortiguard.fortinet.com/psirt/FG-IR-25-1142 exploitgithub.com/0xBlackash/CVE-2026-21643/blob/main/cve-2026-21643.py refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21643 kevcisa.gov/known-exploited-vulnerabilities-catalog