Fortinet Patches Critical SQLi Flaw Enabling Unauthenticated Code Execution

Certains articles de veille peuvent faire l'objet de traduction automatique.

Fortinet has released security updates to address a critical flaw impacting FortiClientEMS that could lead to the execution of arbitrary code on susceptible systems.
The vulnerability, tracked as CVE-2026-21643, has a CVSS rating of 9.1 out of a maximum of 10.0.

« An improper neutralization of special elements used in an SQL Command (‘SQL Injection’) vulnerability [CWE-89] in FortiClientEMS may

Source : https://thehackernews.com/2026/02/fortinet-patches-critical-sqli-flaw.html