CVE-2026-21643—Fortinet FortiClient EMS SQL Injection Vulnerability

漏洞名称

Fortinet FortiClient EMS SQL Injection Vulnerability

描述

Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

其他说明

• https://fortiguard.fortinet.com/psirt/FG-IR-25-1142
• https://nvd.nist.gov/vuln/detail/CVE-2026-21643

相关新闻文章

• Critical Fortinet FortiSandbox flaws now exploited in attacksJune 16, 2026
• Fortinet warns of critical RCE flaws in FortiSandbox and FortiAuthenticatorMay 12, 2026
• CISA Adds 6 Known Exploited Flaws in Fortinet, Microsoft, and Adobe SoftwareApril 14, 2026

相关 CWE

• CWE-89