Critical FortiClient EMS Vulnerability Allows Remote Malicious Code Execution

Back Cyberpress

Critical FortiClient EMS Vulnerability Allows Remote Malicious Code Execution

Cyberpress • February 9, 2026

Share: View original

Tracked as CVE-2026-21643, this vulnerability was disclosed on February 6, 2026, earning a severe CVSS score of 9.1 out of 10.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical SQL Injection Vulnerability in Fortinet FortiClientEMS A critical SQL injection vulnerability, identified as CVE-2026-21643, has been discovered in Fortinet FortiClientEMS version 7.4.4. This flaw allows unauthenticated attackers to execute unauthorized code or commands, posing significant risks to affected systems. 21 sources 65

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

Platforms (1)

FortiClient EMS

Vulnerabilities (1)

FortiClient EMS Vulnerability