← Volver al buscador de CVEs

CVE-2026-39809

FortiClientEMS

Descripción

A improper neutralization of special elements used in an sql command (-sql injection-) vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5, FortiClientEMS 7.2.0 through 7.2.12, FortiClientEMS 7.0 all versions may allow attacker to execute unauthorized code or commands via sending crafted requests

CVSS 6.7EPSS 0.133%Riesgo 0.68
Ver fuente
Publicación
2026-04-14 16:16:45
Versiones afectadas
<=7.4.5,<=7.2.12,==7.0
Tipo
Package
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H