CVE-2026-24858 - Vulnerability Details

Related Threat Clusters

• Critical SQL Injection Vulnerability in Fortinet FortiClientEMS

  A critical SQL injection vulnerability, identified as CVE-2026-21643, has been discovered in Fortinet FortiClientEMS version 7.4.4. This flaw allows unauthenticated attackers to execute unauthorized code or commands,…

  21 articles · Updated February 9, 2026
• Fortinet Confirms Exploitation of FortiCloud SSO Bypass Vulnerability

  Fortinet has confirmed that attackers are actively exploiting a vulnerability in FortiCloud's single sign-on (SSO) authentication, affecting even fully patched devices. The exploitation allows unauthorized access, with…

  35 articles · Updated January 23, 2026

Recent Intelligence Reports

• CVE-2026-21643: Critical FortiClient EMS Vulnerability Enables Unauthenticated Remote ... — Socprime · February 10, 2026
• SIEM Rules for detecting exploitation of vulnerabilities in FortiCloud SSO — Kaspersky · February 5, 2026
• Fortinet faces second authentication flaw in a fortnight — Sdxcentral · January 31, 2026
• Over 3.28 Million Fortinet Devices Exposed Online With Risky Web Properties — Cyberpress · January 30, 2026
• 3,280,081 Fortinet Devices Online With Exposed Web Properties Under Risk — Cybersecuritynews · January 30, 2026
• Fortinet’s latest zero — Cyberscoop · January 28, 2026
• U.S. CISA adds a flaw in multiple Fortinet products to its Known Exploited Vulnerabilities catalog — Securityaffairs.Co · January 28, 2026
• CVE-2026-24858: FortiOS SSO Zero-Day Exploited in the Wild — Socprime · January 28, 2026

Related Entities