Fortinet FortiClient EMS SQL Injection Vulnerability

Mô tả

Tham khảo

• fortiguard.fortinet.com/psirt/FG-IR-25-1142 · Vendor Advisory
• 0xBlackash/CVE-2026-21643 · Exploit
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2026-21643

Lỗ hổng khác của forticlientems

• CVE-2026-59836NGHIÊM TRỌNG 9.8A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiCli…
• CVE-2026-39810TRUNG BÌNH 5.5A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to information disclos…
• CVE-2026-39809TRUNG BÌNH 6.7A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.0 throug…
• CVE-2026-35616NGHIÊM TRỌNG 9.8ĐANG BỊ KHAI THÁC (CISA KEV)A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unau…
• CVE-2025-59922CAO 7.2An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet For…