NewsFortinet PSIRT

    Multiple SQL Injections

    Share
    CVSSv3 Score: 7.1 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiClientEMS may allow an authenticated attacker to run arbitrary SQL queries on the database via sending crafted requests. Revised on 2026-04-14 00:00:00

    Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-102

    ID