An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Fortinet |
|
No data.
No data.
No data.
References
| Link | Providers |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-25-1142 |
|
History
Fri, 06 Feb 2026 08:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests. | |
| First Time appeared |
Fortinet
Fortinet forticlientems |
|
| Weaknesses | CWE-89 | |
| CPEs | cpe:2.3:a:fortinet:forticlientems:7.4.4:*:*:*:*:*:*:* | |
| Vendors & Products |
Fortinet
Fortinet forticlientems |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: fortinet
Published:
Updated: 2026-02-06T08:25:37.239Z
Reserved: 2026-01-02T08:41:26.514Z
Link: CVE-2026-21643
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-02-06T09:15:49.330
Modified: 2026-02-06T09:15:49.330
Link: CVE-2026-21643
Redhat
No data.
OpenCVE Enrichment
No data.