CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Fortinet FortiClientEMS Remote Code Execution (RCE) Vulnerability via Improper Access Control (CVE-2026-35616)
[Affected Scope] Fortinet FortiClientEMS versions 7.4.5 through 7.4.6
[Impact] An unauthenticated remote attacker can execute unauthorized code or commands with system privileges via crafted network requests.
[Mitigation] Apply the official Fortinet security patch (version 7.4.7 or higher) immediately and restrict external network access to the EMS server.
Fortinet FortiClientEMS SQL Injection Remote Code Execution Vulnerability Advisory (CVE-2026-21643)
[Affected Scope] Fortinet FortiClientEMS version 7.4.4
[Impact] An unauthenticated remote attacker can execute unauthorized code or commands with system privileges by sending crafted HTTP requests.
[Mitigation] Immediately apply the official vendor patches and restrict external access to the EMS management ports.
Fortinet FortiClientEMS SQL Injection Remote Code Execution (RCE) Vulnerability Advisory (CVE-2023-48788)
[Affected Scope] Fortinet FortiClientEMS versions 7.2.0 through 7.2.2, and 7.0.1 through 7.0.10
[Impact] An unauthenticated remote attacker can execute unauthorized code or system commands with database server privileges via specially crafted packets, leading to complete system compromise
[Mitigation] Immediately upgrade FortiClientEMS to patched versions (7.2.3+ or 7.0.11+) and restrict access to the management ports