FortiClientEMS 漏洞

严重CVE-2026-216432026/06/25

Fortinet FortiClientEMS 7.4.4 - SQL Injection

Fortinet FortiClientEMS version 7.4.4 and earlier contains an unauthenticated SQL injection vulnerability in the /api/v1/init_consts endpoint. The 'Site' HTTP header value is passed directly into the PostgreSQL search_path without sanitization, allowing remote unauthenticated attackers to inject arbitrary SQL commands. This can lead to information disclosure, database manipulation, or OS command execution when chained with PostgreSQL functions.

FortiClientEMSPoC 已收录

CVSS—

高危CVE-2026-356162026/06/25

FortiClient EMS - Authentication Bypass

Detects whether Fortinet hotfix FG-IR-26-099 for CVE-2026-35616 is missing by comparing behavioral responses from a certificate-authenticated endpoint. The template sends X-SSL-CLIENT-VERIFY: SUCCESS without certificate material and checks whether this spoofed header changes server behavior.

FortiClientEMSPoC 已收录

CVSS—

严重CVE-2023-487882023/11/19

Fortinet Forticlient Endpoint Management Server - SQL Injection

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.

FortiClientEMSPoC 已收录

CVSS9.8EPSS 94.2%

FortiClientEMS

关联漏洞

Fortinet FortiClientEMS 7.4.4 - SQL Injection

FortiClient EMS - Authentication Bypass

Fortinet Forticlient Endpoint Management Server - SQL Injection