FortiGuard Product Security Update Advisory (CVE-2026-21643)

FortiGuard Product Security Update Advisory (CVE-2026-21643)

Overview

 

We have released security updates to fix vulnerabilities in FortiGuard products. Users of affected products are advised to update to the latest version.
 

 

Affected Products

 

CVE-2026-21643

 

FortiClientEMS version: 7.4.4

 

 

Resolved Vulnerabilities

 

SQL Injection Vulnerability in FortiClientEMS (CVE-2026-21643)

 

 

Vulnerability Patches

Vulnerability Patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

 

CVE-2026-21643

 

FortiClientEMS version: 7.4.5 and later

 

 

References

 

[1] SQLi in administrative interface
https://fortiguard.fortinet.com/psirt/FG-IR-25-1142