Fortinet Forticlientems vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Fortinet Forticlientems: 8 record(s), with affected versions and fixes.
cpe:2.3:a:fortinet:forticlientems

CVE-2026-59836 Critical · 9.8 CWE-295 Jul 14, 2026

Improper Certificate Validation in Fortinet Forticlientems

A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow attacker to information disclosure via <insert attack vector here>

CVE-2026-39810 Medium · 5.5 CWE-321 Apr 14, 2026

A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0…

A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to information disclosure via decrypting database dump.

CVE-2026-39809 Medium · 6.7 CWE-89 Apr 14, 2026

SQL Injection in Fortinet Forticlientems

A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5, FortiClientEMS 7.2.0 through 7.2.12, FortiClientEMS 7.0 all versions may allow attacker to execute unauthorized code or commands via sending crafted requests

CVE-2026-35616 Critical · 9.8 KEV Urgent · 72 Public exploit CWE-284 Apr 3, 2026

Fortinet FortiClient EMS Improper Access Control Vulnerability

A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.

CVE-2026-21643 Critical · 9.8 KEV Urgent · 73 Public exploit CWE-89 Feb 6, 2026

Fortinet FortiClient EMS SQL Injection Vulnerability

An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.

CVE-2025-59922 High · 7.2 CWE-89 Jan 13, 2026

SQL Injection in Fortinet Forticlientems

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.4, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2.0 through 7.2.10, FortiClientEMS 7.0 all versions may allow an authenticated attacker with at least read-only admin permission to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.

CVE-2023-48788 Critical · 9.8 KEV Urgent · 100 Public exploit Ransomware CWE-89 Mar 12, 2024

Fortinet FortiClient EMS SQL Injection Vulnerability

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.

CVE-2020-9287 High · 7.8 CWE-426 Mar 15, 2020

Untrusted Search Path in Fortinet Forticlient Emergency Management Server

A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable