Arcticwolf Critical SQL Injection Vulnerability in Fortinet FortiClientEMS
Article Content
Browse articles 
A critical SQL injection vulnerability, identified as CVE-2026-21643, has been discovered in Fortinet FortiClientEMS version 7.4.4. This flaw allows unauthenticated attackers to execute unauthorized code or commands, posing significant risks to affected systems.
Ask AI about this cluster
Answers cite the sources they use
Updated 221d ago How this analysis works
Timeline
2026-02-06
CVE-2026-21643 published
2026-02-06
First public PoC released
2026-02-07
Redhotcyber reports on vulnerability
2026-02-09
Arcticwolf reports on vulnerability
More articles in this cluster (21)
Following this threat?
Track Fortinet and CVE-2026-21643 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CVE-2026-82039: High-Risk SQL Injection in UTMStack UTMStack versions before 11.2.16 contain a SQL injection vulnerability in the UtmAssetGroupService.searchQueryBuilder() method. This flaw allows authenticated attackers to inject arbitrary SQL through unsanitized inputs, enabling full database access and modification via the /api/utm-asset-groups/searchGroupsByFilter… 
CVE-2026-88789: High-Risk XML Vulnerability in Apache Camel Quarkus CVE-2026-88789 is a vulnerability in the XSLT support extension of Apache Camel Quarkus, affecting versions from 3.2.0 to 3.40.0. This flaw allows attackers to read local files or access internal network locations by supplying a malicious XML document with external entity declarations. The vulnerability arises from…