Back Cybersecuritynews

Critical FortiClientEMS Vulnerability Let Attackers Execute Malicious Code Remotely

Cybersecuritynews •Guru Baran • February 9, 2026

Fortinet has issued a critical security advisory warning administrators to immediately patch instances of FortiClientEMS, its central management solution for endpoint protection. The vulnerability, tracked as CVE-2026-21643, carries a CVSSv3 score of 9.1 and could allow unauthenticated, remote attackers to execute arbitrary code or unauthorized commands on affected servers. The flaw is categorized as an […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical SQL Injection Vulnerability in Fortinet FortiClientEMS A critical SQL injection vulnerability, identified as CVE-2026-21643, has been discovered in Fortinet FortiClientEMS version 7.4.4. This flaw allows unauthenticated attackers to execute unauthorized code or commands, posing significant risks to affected systems. 21 sources 65

Extracted Entities

Companies (1)

Fortinet

CVEs (1)

CVE-2026-21643