Fortinet FortiClient EMS SQL Injection Vulnerability

概要

参考情報

• fortiguard.fortinet.com/psirt/FG-IR-25-1142 · Vendor Advisory
• 0xBlackash/CVE-2026-21643 · Exploit
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2026-21643

forticlientems のその他の脆弱性

• CVE-2026-59836緊急 9.8A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiCli…
• CVE-2026-39810中 5.5A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to information disclos…
• CVE-2026-39809中 6.7A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.0 throug…
• CVE-2026-35616緊急 9.8悪用確認済み（CISA KEV）A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unau…
• CVE-2025-59922高 7.2An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet For…