CVE-2026-39809

A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5, FortiClientEMS 7.2.0 through 7.2.12, FortiClientEMS 7.0 all versions may allow attacker to execute unauthorized code or commands via sending crafted requests

CVSS v3 6.7 MEDIUM

6.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://fortiguard.fortinet.com/psirt/FG-IR-26-102	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:fortinet:forticlientems::::::::
	cpe:2.3:a:fortinet:forticlientems::::::::
	cpe:2.3:a:fortinet:forticlientems::::::::

History

26 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando SQL (’inyección SQL’) en Fortinet FortiClientEMS 7.4.0 hasta 7.4.5, FortiClientEMS 7.2.0 hasta 7.2.12, FortiClientEMS 7.0 todas las versiones podría permitir al atacante ejecutar código o comandos no autorizados mediante el envío de solicitudes manipuladas.

Information

Published : 2026-04-14 16:16

Updated : 2026-10-26 21:10

NVD link : CVE-2026-39809

Mitre link : CVE-2026-39809

CVE.ORG link : CVE-2026-39809

JSON object : View

Products Affected

fortinet

forticlientems

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

{"id": "CVE-2026-39809", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-39809", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-04-14T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@fortinet.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}]}, "affected": [{"source": "psirt@fortinet.com", "affectedData": [{"cpes": ["cpe:2.3:a:fortinet:forticlientems:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:forticlientems:7.4.0:*:*:*:*:*:*:*"], "vendor": "Fortinet", "product": "FortiClientEMS", "versions": [{"status": "affected", "version": "7.4.3", "versionType": "semver", "lessThanOrEqual": "7.4.4"}, {"status": "affected", "version": "7.4.0", "versionType": "semver", "lessThanOrEqual": "7.4.1"}], "defaultStatus": "unaffected"}]}], "published": "2026-04-14T16:16:45.017", "references": [{"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-102", "tags": ["Vendor Advisory"], "source": "psirt@fortinet.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@fortinet.com", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5, FortiClientEMS 7.2.0 through 7.2.12, FortiClientEMS 7.0 all versions may allow attacker to execute unauthorized code or commands via sending crafted requests"}, {"lang": "es", "value": "Una vulnerabilidad de neutralizaci\u00f3n incorrecta de elementos especiales utilizados en un comando SQL (\u2019inyecci\u00f3n SQL\u2019) en Fortinet FortiClientEMS 7.4.0 hasta 7.4.5, FortiClientEMS 7.2.0 hasta 7.2.12, FortiClientEMS 7.0 todas las versiones podr\u00eda permitir al atacante ejecutar c\u00f3digo o comandos no autorizados mediante el env\u00edo de solicitudes manipuladas."}], "lastModified": "2026-10-26T21:10:00.170", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "91D4223F-37D4-45D7-A767-2AA8EDAC9AEC", "versionEndIncluding": "7.0.13", "versionStartIncluding": "7.0.0"}, {"criteria": "cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6829FECD-54D2-42D1-B2F8-B34B3913FC51", "versionEndExcluding": "7.2.13", "versionStartIncluding": "7.2.0"}, {"criteria": "cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7FF067FF-526C-4399-8220-E2978445F005", "versionEndExcluding": "7.4.6", "versionStartIncluding": "7.4.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@fortinet.com"}