critical
CVE-2026-21643
FortiClient EMS 7.4.4 pre-authentication SQL injection in the management server
- Severity
- critical
- Affected product
- FortiClient EMS
- Affected versions
- FortiClient EMS all versions before the fix
- Detection basis
- Appliance fingerprint
- Shipped rule
- FortiClient EMS: FortiClient EMS 7.4.4 pre-authentication SQL injection in the management server
- Added to NewScan
- 2026-08-06
- Detected by
- NewScan — free, self-hosted
How NewScan reports it
APPLIANCE FINGERPRINT
NewScan fingerprints the FortiClient EMS appliance and reports this CVE when the detected version falls inside the affected range below.
References
Scan for this yourself — local, in-band scanning is free.
Get NewScan (FREE) →Review the measured benchmark, then use the verified remediation process.