Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2026-21643 [Critical] [Actively exploited]

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-21643.

CVSS: 9.8
Exploit Status: Actively exploited
Coverage Span: 2026-03-09
Reports: 1 related reports

Associated Reports & Timeline

Pre-Authentication SQL Injection in FortiClient EMS 7.4.4 - CVE-2026-21643

Pre-auth CVE-2026-21643 exploitation: /api/v1/init_consts leaks database errors with no lockout, letting attackers extract admin credentials and endpoint data from multi-tenant FortiClient EMS 7.4.4.