VulnerabilitycriticalExploited in the wild

Critical Fortinet FortiClient EMS flaw exploited for Remote Code Execution

Security Affairsby @securityaffairsMar 30, 2026 · 10:44 UTC (Mar 30, 2026)2 min read1 · 1 read

Read at securityaffairs.com

Analyze CVE-2026-21643 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2026-21643 CVE-2023-48788

Tags: cve-2023-48788 cve-2026-21643 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-48788	Unauthenticated SQL Injection in Fortinet FortiClient EMS	9.8	98%	KEVRansomware	Mar 12, 2024 KEV Mar 25, 2024
CVE-2026-21643	Unauthenticated SQL Injection to Code Execution in Fortinet FortiClient EMS 7.4.4	9.8	98%	KEVPoC	Feb 6, 2026 KEV Apr 13, 2026

From the original article

2 min read at securityaffairs.com

Attackers are exploiting a critical Fortinet FortiClient EMS flaw (CVE-2026-21643) that allows remote code execution via SQL injection. A critical Fortinet FortiClient EMS vulnerability, tracked as CVE-2026-21643 (CVSS score of 9. 1), is now being actively exploited.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.