Skip to content
NewA calmer, faster ZeroHour
VulnerabilitycriticalExploited in the wild

Critical Fortinet FortiClientEMS flaw allows remote code execution

Security Affairsby @securityaffairs ()1 min read1 · 1 read
Read at securityaffairs.com
Analyze CVE-2026-21643 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-21643
Tags
cve-2026-21643vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-21643
Unauthenticated SQL Injection to Code Execution in Fortinet FortiClient EMS 7.4.4
9.898%KEVPoC
KEV

From the original article

1 min read at securityaffairs.com

Fortinet warns of a critical FortiClientEMS vulnerability that lets remote attackers run malicious code without logging in. Fortinet issued an urgent advisory to address a critical FortiClientEMS vulnerability, tracked as CVE-2026-21643 (CVSS score of 9. 1).

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.