CVE 9.1 CRITICAL

CVE-2026-21643_CVE-2026-21643

9.1 / 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C

Description

An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.

AI Analysis

SQL injection vulnerability allowing unauthorized code execution

Basic Information

ID CVE-2026-21643
Source fortinet
Published Feb 6, 2026 at 08:24

Affected Product

Vendor Fortinet
Product FortiClientEMS
Version 7.4.4
Affected Versions Fortinet FortiClientEMS 7.4.4

CWE Classification

AI Assessment

AI Score 9.1 / 10
AI Severity Critical
Vendor Fortinet
Product FortiClientEMS
Version 7.4.4

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.