{"uuid": "df9d3d9b-283a-4de2-a054-705114c879a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/cissp/7861", "content": "#AppSec\n#InfosecStandards\nOWASP Application Security Verification Standard\nVersion 5.0.0, 2025.\n\nPlus also\nFortinet Fixes Critical FortiClientEMS RCE (CVE-2026-21643, CVSS 9.1).\n\nSQL injection flaw enables unauthenticated remote command execution via crafted requests. Affects EMS 7.4.4 (patch available). Separate FortiCloud SSO bug is actively exploited for admin persistence and firewall config theft.\nSee affected versions and patch guidance \u2192 \nhttps://thehackernews.com/2026/02/fortinet-patches-critical-sqli-flaw.html\n\n\u2014 CISO as a Service \u2014\n| Strategic Cyber Defense & GRC\nResilient Through Knowledge\n2026.02.23\n\nhttps://www.linkedin.com/posts/alirezaghahrood_owasp-asvs-2025-activity-7431554057246265344-Ly7z", "creation_timestamp": "2026-09-02T01:03:47.392389Z"}