Product of Fortinet
FortiClient EMS
As of , 3 Fortinet FortiClient EMS vulnerabilities are on CISA's list of exploited vulnerabilities, 1 of them used in ransomware campaigns; 2 were added in 2026. Patch first: CVE-2023-48788.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2023-48788SQL Injection | Fortinet FortiClient EMS | Patch this weekRansomware use; Metasploit module; EPSS 0.98 | 0.98 | ||
| 2 | CVE-2026-21643SQL Injection | Fortinet FortiClient EMS | Patch this weekEPSS 0.94 | 0.94 | ||
| 3 | CVE-2026-35616Improper Access Control | Fortinet FortiClient EMS | Patch soon | 0.09 |
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2024 | 1 |
| 2025 | none |
| 2026 | 2 |