Frequency
8
occurrences
First Seen
January 28, 2026
Last Seen
February 10, 2026
Related Threat Clusters
-
Critical SQL Injection Vulnerability in Fortinet FortiClientEMS
A critical SQL injection vulnerability, identified as CVE-2026-21643, has been discovered in Fortinet FortiClientEMS version 7.4.4. This flaw allows unauthenticated attackers to execute unauthorized code or commands,…
21 articles · Updated February 9, 2026 -
Fortinet Confirms Exploitation of FortiCloud SSO Bypass Vulnerability
Fortinet has confirmed that attackers are actively exploiting a vulnerability in FortiCloud's single sign-on (SSO) authentication, affecting even fully patched devices. The exploitation allows unauthorized access, with…
35 articles · Updated January 23, 2026
Recent Intelligence Reports
- CVE-2026-21643: Critical FortiClient EMS Vulnerability Enables Unauthenticated Remote ... — Socprime · February 10, 2026
- SIEM Rules for detecting exploitation of vulnerabilities in FortiCloud SSO — Kaspersky · February 5, 2026
- Fortinet faces second authentication flaw in a fortnight — Sdxcentral · January 31, 2026
- Over 3.28 Million Fortinet Devices Exposed Online With Risky Web Properties — Cyberpress · January 30, 2026
- 3,280,081 Fortinet Devices Online With Exposed Web Properties Under Risk — Cybersecuritynews · January 30, 2026
- Fortinet’s latest zero — Cyberscoop · January 28, 2026
- U.S. CISA adds a flaw in multiple Fortinet products to its Known Exploited Vulnerabilities catalog — Securityaffairs.Co · January 28, 2026
- CVE-2026-24858: FortiOS SSO Zero-Day Exploited in the Wild — Socprime · January 28, 2026