Skip to main content

FortiClient EMS vulnerabilities

3 published alerts for Fortinet FortiClient EMS.

Actively exploited (KEV)

CVE-2026-21643

Fortinet FortiClient EMS SQL Injection Vulnerability

Fortinet FortiClient EMS is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-21643). Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests. CISA remediation due date: 2026-04-16. If you need help checking exposure, call (864) 335-9223.

Actively exploited (KEV)

CVE-2026-35616

Fortinet FortiClient EMS Improper Access Control Vulnerability

Fortinet FortiClient EMS is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-35616). Fortinet FortiClient EMS contains an improper access control vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests. CISA remediation due date: 2026-04-09. If you need help checking exposure, call (864) 335-9223.

Actively exploited (KEV)Ransomware

CVE-2023-48788

Fortinet FortiClient EMS SQL Injection Vulnerability

Fortinet FortiClient EMS is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2023-48788). Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests. CISA remediation due date: 2024-04-15. If you need help checking exposure, call (864) 335-9223.