---
id: CVE-2026-21643
title: >-
  An improper neutralization of special elements used in an sql command ('sql
  injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an
  unauthenticated attacker to execute unauthorized code or commands via
  specifically crafte…
summary: >-
  An improper neutralization of special elements used in an sql command ('sql
  injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an
  unauthenticated attacker to execute unauthorized code or commands via
  specifically crafte…
severity: critical
cvss: 9.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C'
cvssSource: cna
cwe:
  - CWE-89
vendor: Fortinet
product: FortiClientEMS
affected:
  - FortiClientEMS 7.4.4
ssvc:
  exploitation: active
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-02-06T00:00:00+00:00'
exploited: true
exploitAvailable: true
published: '2026-02-06'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T15:42:04.113Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-21643'
references:
  - url: 'https://fortiguard.fortinet.com/psirt/FG-IR-25-1142'
    label: 'https://fortiguard.fortinet.com/psirt/FG-IR-25-1142'
tags:
  - cve.org
  - in-the-wild
  - exploit-available
  - kev
epss: 0.97735
epssPercentile: 0.99904
kev: true
kevDateAdded: '2026-04-13'
kevDueDate: '2026-04-16'
kevRansomware: false
exploits:
  github: 2
  githubRepos:
    - 'https://github.com/0xBlackash/CVE-2026-21643'
    - 'https://github.com/alirezac0/CVE-2026-21643'
  nuclei:
    - CVE-2026-21643
  checkedAt: '2026-11-06T15:54:39.685Z'
ingestedAt: '2026-11-06T15:54:03.990Z'
---

## Overview

An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.

## Affected

- `FortiClientEMS 7.4.4`

## Remediation

Upgrade to FortiClientEMS version 8.0.0 or above
Upgrade to FortiClientEMS version 7.4.5 or above