CVE-2026-21643 1

CVE-2026-21643: Fortinet Forti Client EMS SQL Injection Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Apr 13, 2026

Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.

Vulnerabilities & Patching