RaqibCTI
CVE

CVE-2026-21643

P2
Fortinet FortiClient EMS SQL Injection Vulnerability
Fortinet · FortiClient EMS
Date added (CISA)
2026-04-13
Remediation due
2026-04-16
Known ransomware use
Not indicated
Remediation priority
P2past CISA due date

Description

Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.

Source: NVD ↗ · CISA KEV Catalog ↗

CVE-2026-21643: Fortinet FortiClient EMS SQL Injection Vulnerability · RaqibCTI