{"vulnerability": "cve-2026-2164", "sightings": [{"uuid": "a05a5f05-1a18-4cb3-9b0c-6c1c7db7376c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3megmbaogpz2j", "content": "", "creation_timestamp": "2026-02-09T14:00:07.927961Z"}, {"uuid": "8c317606-795f-42c9-a06a-a69e27d09619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/116024412137620292", "content": "", "creation_timestamp": "2026-02-06T15:33:53.913893Z"}, {"uuid": "43f19e62-1dd4-4ca3-9518-8289fdd466d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/fortinet-security-advisory-av26-096", "content": "", "creation_timestamp": "2026-02-09T13:30:57.000000Z"}, {"uuid": "24a9d869-63e5-4585-9f6c-37eda7340a68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mei4cavo5i2s", "content": "", "creation_timestamp": "2026-02-10T04:19:41.072390Z"}, {"uuid": "e57cdfdb-7700-4252-ac32-2224af760b21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3meicgln6x42o", "content": "", "creation_timestamp": "2026-02-10T06:09:29.576848Z"}, {"uuid": "83f7662a-1011-4696-b8f0-a25e609d6377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://thehackernews.com/2026/02/fortinet-patches-critical-sqli-flaw.html", "content": "", "creation_timestamp": "2026-02-10T03:38:00.000000Z"}, {"uuid": "2de09364-a103-4a56-b818-8a479fce82e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3meilte5xli2h", "content": "", "creation_timestamp": "2026-02-10T08:57:41.046808Z"}, {"uuid": "464568cd-7dc7-4fa6-b7fe-1d2a9eb97392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3men2hutgls2w", "content": "", "creation_timestamp": "2026-02-12T03:30:23.260017Z"}, {"uuid": "420044ca-6c6f-47ec-880f-dca8624a5779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3men7jvvu6c2w", "content": "", "creation_timestamp": "2026-02-12T05:00:59.634551Z"}, {"uuid": "7103124f-4fb1-4eda-b56e-af2d6e1093e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me6nhfw7lq23", "content": "", "creation_timestamp": "2026-02-06T10:00:10.738746Z"}, {"uuid": "79ab69a5-2241-4ae4-8fca-a021d1e71a50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3menijewwps2w", "content": "", "creation_timestamp": "2026-02-12T07:41:44.661223Z"}, {"uuid": "88b6b3dd-6c27-4b06-ac25-469ae6689d32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21643", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mer6vfl5bc2o", "content": "", "creation_timestamp": "2026-02-13T19:00:08.501859Z"}, {"uuid": "ec1e4b92-518a-42a2-aa3c-2cc76300c403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/calimegai.bsky.social/post/3melxb4dhtj2a", "content": "", "creation_timestamp": "2026-02-11T17:00:12.945394Z"}, {"uuid": "e596884d-48fc-4a48-85b7-82311b48373d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/calimegai.bsky.social/post/3meisq37qzl2s", "content": "", "creation_timestamp": "2026-02-10T11:01:07.458040Z"}, {"uuid": "45be9c5c-92d4-4d9f-9e23-5c787d62fb97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/116046402681149410", "content": "", "creation_timestamp": "2026-02-10T12:46:20.398969Z"}, {"uuid": "cd0214d1-fd22-47f9-a78a-072b58b191f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3meiymjjx6c22", "content": "", "creation_timestamp": "2026-02-10T12:46:31.550093Z"}, {"uuid": "3d9fe467-47b1-4012-95f2-97d7db7675cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3meiyy4ndih2q", "content": "", "creation_timestamp": "2026-02-10T12:53:00.047299Z"}, {"uuid": "dfbf7cd7-e750-4d9f-8383-19b51e8393d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3meizpseelp2e", "content": "", "creation_timestamp": "2026-02-10T13:06:14.426903Z"}, {"uuid": "1b4b9f3a-90b8-48c9-833b-85f52679c13b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mejepubfeh2n", "content": "", "creation_timestamp": "2026-02-10T16:23:07.928915Z"}, {"uuid": "6c01d168-6369-47da-a71f-8a1f4818e09d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21646", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbis3inj772r", "content": "", "creation_timestamp": "2026-01-03T06:34:04.419868Z"}, {"uuid": "1ccc305f-2c57-4486-97c2-b425ffc4794e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21649", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbisbhp6ui2c", "content": "", "creation_timestamp": "2026-01-03T06:37:22.132974Z"}, {"uuid": "6d38a187-9232-4cd9-ad86-14b06c91f1b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21647", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbisi6lhtj2y", "content": "", "creation_timestamp": "2026-01-03T06:41:07.195691Z"}, {"uuid": "ed0f09e6-c3fc-44c7-b43f-3f8766bf9c40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21644", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbispu4xmu2q", "content": "", "creation_timestamp": "2026-01-03T06:45:24.662208Z"}, {"uuid": "51b21c88-691f-4095-bf70-4c3d272da6d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21648", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbitbqzcrk2q", "content": "", "creation_timestamp": "2026-01-03T06:55:25.416870Z"}, {"uuid": "333223df-aa0f-4b24-88b9-acc57fa338d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21645", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbittnuy522e", "content": "", "creation_timestamp": "2026-01-03T07:05:26.135412Z"}, {"uuid": "ccfd5a02-a689-4449-842e-9061333826fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://infosec.exchange/users/technadu/statuses/116047705089380460", "content": "", "creation_timestamp": "2026-02-10T18:17:37.226536Z"}, {"uuid": "f00717d4-8a66-49c2-87f5-ce98399ff895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mejluq4mm62o", "content": "", "creation_timestamp": "2026-02-10T18:31:07.842658Z"}, {"uuid": "e7c55680-f4ab-4f49-9d1b-8a0760544441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mem2urs6t42o", "content": "", "creation_timestamp": "2026-02-11T18:04:54.060245Z"}, {"uuid": "fe3f73dc-f77b-4476-88fe-4fc4dd99c2cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0047", "content": "", "creation_timestamp": "2026-02-09T09:16:18.000000Z"}, {"uuid": "485dff7d-0950-4ff2-b169-c01d3875331b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/rxerium.com/post/3micej5bo2h25", "content": "", "creation_timestamp": "2026-03-30T19:11:30.892282Z"}, {"uuid": "eca3af33-f200-418d-bc3f-922dc092d00a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/redsiege.com/post/3mic5eqrg7k22", "content": "", "creation_timestamp": "2026-03-30T17:03:49.922559Z"}, {"uuid": "91723bb1-fb14-4cab-9351-1865c2e47663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3miccuoootw2m", "content": "", "creation_timestamp": "2026-03-30T18:42:10.047469Z"}, {"uuid": "94b41410-76e9-44e9-af97-7a416ccaac03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bishopfox.com/blog/strongswan-cve-2026-25075-integer-underflow-in-vpn-authentication", "content": "", "creation_timestamp": "2026-03-27T03:00:14.000000Z"}, {"uuid": "e613600b-72f5-4f2e-8a94-d643713e7544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0047", "content": "", "creation_timestamp": "2026-03-30T09:36:22.000000Z"}, {"uuid": "b8d6b199-4cc4-42fd-a96e-a29d496688ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mic23f6n4w2z", "content": "", "creation_timestamp": "2026-03-30T16:04:51.265921Z"}, {"uuid": "81df82e4-99a3-4545-bb1f-a6d22eee28ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mid7cdi63m2b", "content": "", "creation_timestamp": "2026-03-31T03:10:52.711418Z"}, {"uuid": "41c3a5ab-f9ce-4d29-ae1a-c94da6a1fe53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bishopfox.com/blog/cve-2026-21643-pre-authentication-sql-injection-in-forticlient-ems-7-4-4", "content": "", "creation_timestamp": "2026-03-11T03:00:22.000000Z"}, {"uuid": "e9e7ba7b-534f-41a6-9ac3-8d109fdd9070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mhgbi4jdc42m", "content": "", "creation_timestamp": "2026-03-19T15:02:42.392300Z"}, {"uuid": "4b16bf6b-ca8f-473f-b329-4c5c065848f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mhelijku2s2p", "content": "", "creation_timestamp": "2026-03-18T22:56:45.769005Z"}, {"uuid": "3832bc5b-5cb7-448a-8780-0a7d7e861ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21641", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3mczvik3h3s24", "content": "", "creation_timestamp": "2026-01-22T19:15:27.875616Z"}, {"uuid": "8d3e9538-37af-45fe-af2f-dd49c3dace2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3midgv2ezbs2d", "content": "", "creation_timestamp": "2026-03-31T05:26:37.221668Z"}, {"uuid": "d8c2a015-6768-44dc-b301-7d84a66822ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mict46h5c42k", "content": "", "creation_timestamp": "2026-03-30T23:32:41.643943Z"}, {"uuid": "9b48dd48-edde-479c-a388-273c177e646e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://www.acn.gov.it/portale/w/operational-summary-febbraio-2026", "content": "", "creation_timestamp": "2026-03-26T07:00:56.000000Z"}, {"uuid": "5f40d973-1f15-4c04-9f0f-1e70bee296f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mibqyzzwks2l", "content": "", "creation_timestamp": "2026-03-30T13:22:32.047333Z"}, {"uuid": "7146bf40-4ea5-4d5a-8d37-8a7e7c1e07c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mic7s5jge62i", "content": "", "creation_timestamp": "2026-03-30T17:47:04.422214Z"}, {"uuid": "032c3181-dfa8-402d-a000-0363b72b6353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/hacksgr.bsky.social/post/3miche4m5ok2t", "content": "", "creation_timestamp": "2026-03-30T20:02:23.634881Z"}, {"uuid": "d38d31d3-9372-409e-83aa-2195a5dc6b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mibj2yqhsj2m", "content": "", "creation_timestamp": "2026-03-30T11:00:24.998662Z"}, {"uuid": "58346167-f0fa-4e2d-9a3f-6cf1973fceea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mickqnfwgm2g", "content": "", "creation_timestamp": "2026-03-30T21:03:06.326121Z"}, {"uuid": "d4bbe76d-311f-4866-81b7-b535effe755c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3midofeobq22d", "content": "", "creation_timestamp": "2026-03-31T07:41:01.541524Z"}, {"uuid": "2e7ac9af-5c22-40b7-aa73-d05e0a05de68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mifzb4wiwc2v", "content": "", "creation_timestamp": "2026-04-01T06:00:50.042596Z"}, {"uuid": "c07782b5-1dae-4e40-9c42-44b8cea766a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mig3vfnck2d7", "content": "", "creation_timestamp": "2026-04-01T06:47:57.180292Z"}, {"uuid": "987e97d4-8d6a-42e3-866d-c6b677ff02ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/116329107783430964", "content": "", "creation_timestamp": "2026-04-01T11:01:58.333607Z"}, {"uuid": "6a24e216-e6ea-495a-be38-8eb912d7dc57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3migto6axy42g", "content": "", "creation_timestamp": "2026-04-01T13:53:24.081967Z"}, {"uuid": "c8bd3921-c854-4a3e-be8f-7238b29bf22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3migxg22cv42s", "content": "", "creation_timestamp": "2026-04-01T15:00:25.998929Z"}, {"uuid": "47cfa1e8-f526-4eaa-a3aa-24e5a2d16db7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "MISP/8d5d67a3-9fd9-4f53-b1b5-033972fb7fe3", "content": "", "creation_timestamp": "2026-04-01T17:47:46.000000Z"}, {"uuid": "fbe4850c-a380-4230-91f0-7451cccb09b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3min33lakjs2l", "content": "", "creation_timestamp": "2026-04-04T01:22:17.016274Z"}, {"uuid": "af7c9841-42e6-4ede-82a8-3f0b63850dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3miphync23k2c", "content": "", "creation_timestamp": "2026-04-05T00:18:31.301088Z"}, {"uuid": "6f12968e-fe45-422e-8a2d-363ddfd42fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mirc36cjbk2p", "content": "", "creation_timestamp": "2026-04-05T17:37:53.651682Z"}, {"uuid": "cd43daab-648c-4d82-ac3a-df32c0baebc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mirc3b7gvs2p", "content": "", "creation_timestamp": "2026-04-05T17:37:54.794319Z"}, {"uuid": "04d7866e-82c9-467f-977b-01ac97b5928f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mirc3b7iuc2p", "content": "", "creation_timestamp": "2026-04-05T17:37:55.979109Z"}, {"uuid": "8bd57db7-672d-4429-bdb5-abb6406218fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/116353321530367043", "content": "", "creation_timestamp": "2026-04-05T17:39:51.574337Z"}, {"uuid": "006218c4-5c16-4695-a52f-2c14c2c59eb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "https://www.linkedin.com/feed/update/urn:li:activity:7443678408401756160/", "content": "", "creation_timestamp": "2026-03-31T04:00:00.000000Z"}, {"uuid": "ca787ae7-b22c-47ac-8468-897fd90dd076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-05)", "content": "", "creation_timestamp": "2026-04-05T00:00:00.000000Z"}, {"uuid": "f8d52447-90b5-4269-bf7e-7ea07c27975d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mit4h6x6qb2h", "content": "", "creation_timestamp": "2026-04-06T11:02:31.388542Z"}, {"uuid": "143f80dd-21ad-47e6-81b0-a1e5fcf4c6eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "published-proof-of-concept", "source": "https://t.me/codeby_sec/10030", "content": "\u041f\u0430\u0441\u0445\u0430\u043b\u044c\u043d\u0430\u044f \u0441\u0443\u0431\u0431\u043e\u0442\u0430, \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u0430\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0438 CVE \u0431\u0435\u0437 \u043f\u0430\u0442\u0447\u0430\n\n31 \u043c\u0430\u0440\u0442\u0430 2026 \u0433\u043e\u0434\u0430 \u0441\u0435\u043d\u0441\u043e\u0440\u044b watchTowr \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e \u043d\u0438 advisory, \u043d\u0438 \u043f\u0430\u0442\u0447\u0430. \u0427\u0435\u0442\u044b\u0440\u044c\u043c\u044f \u0434\u043d\u044f\u043c\u0438 \u043f\u043e\u0437\u0436\u0435, \u0432 \u043f\u0430\u0441\u0445\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0443\u0431\u0431\u043e\u0442\u0443, Fortinet \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c. \u041a \u0442\u043e\u043c\u0443 \u043c\u043e\u043c\u0435\u043d\u0442\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0443\u0436\u0435 \u0441\u0438\u0434\u0435\u043b\u0438 \u0432\u043d\u0443\u0442\u0440\u0438.\n\n\ud83c\udfaf \u041f\u043e\u0447\u0435\u043c\u0443 \u043f\u0440\u0430\u0437\u0434\u043d\u0438\u043a\u0438? SOC \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 \u043f\u043e\u043b\u0441\u0438\u043b\u044b, \u0434\u0435\u0436\u0443\u0440\u043d\u044b\u0439 \u0441\u043c\u043e\u0442\u0440\u0438\u0442 \u0432 \u043f\u043e\u0442\u043e\u043b\u043e\u043a, \u0430 \u043e\u043a\u043d\u043e \u043c\u0435\u0436\u0434\u0443 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0435\u0439 \u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u043e\u043c \u0440\u0430\u0441\u0442\u044f\u0433\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0441 \u0447\u0430\u0441\u043e\u0432 \u0434\u043e \u0434\u043d\u0435\u0439. CEO watchTowr \u0441\u043a\u0430\u0437\u0430\u043b \u043e\u0431 \u044d\u0442\u043e\u043c \u043f\u0440\u044f\u043c\u043e: \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0434\u0430\u0432\u043d\u043e \u043f\u043e\u043d\u044f\u043b\u0438, \u0447\u0442\u043e \u043f\u0440\u0430\u0437\u0434\u043d\u0438\u043a\u0438 \u2014 \u043b\u0443\u0447\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b.\n\nCVE-2026-35616 \u2014 pre-auth RCE \u0441 CVSS 9.8 \u0432 FortiClient EMS \u0432\u0435\u0440\u0441\u0438\u0439 7.4.5\u20137.4.6. \u041d\u0435 \u0430\u043a\u0430\u0434\u0435\u043c\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0441\u0442\u0440\u043e\u0447\u043a\u0430 \u0438\u0437 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f, \u0430 \u0440\u0430\u0431\u043e\u0447\u0438\u0439 zero-day, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0430\u0442\u0447\u0430.\n\n\ud83d\udd0d \u0427\u0442\u043e \u0442\u0430\u043a\u043e\u0435 FortiClient EMS \u0438 \u043f\u043e\u0447\u0435\u043c\u0443 \u044d\u0442\u043e \u0433\u043b\u0430\u0432\u043d\u0430\u044f \u0446\u0435\u043b\u044c?\n\nFortiClient EMS \u2014 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430. \u042d\u0442\u043e \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u044b\u0439 management plane \u0432\u0441\u0435\u0439 endpoint-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b Fortinet. \u0427\u0435\u0440\u0435\u0437 \u043d\u0435\u0433\u043e \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442 \u0432\u0441\u0451: VPN-\u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438, compliance-\u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u044f \u0441 \u0430\u0433\u0435\u043d\u0442\u043e\u0432, \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f \u0441 FortiSandbox \u0438 FortiGate.\n\n\u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f EMS \u043d\u0430 red team \u2014 \u044d\u0442\u043e \u0434\u0436\u0435\u043a\u043f\u043e\u0442. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442:\n\n\u2022 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043d\u0430 \u0432\u0441\u0435\u0445 endpoint'\u0430\u0445\n\u2022 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u043a\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0447\u0435\u0440\u0435\u0437 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 push-\u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\n\u2022 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0438 \u0441 VPN-\u0442\u043e\u043a\u0435\u043d\u0430\u043c\u0438\n\u2022 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044e FortiSandbox-\u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0435\u0439\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shadowserver, \u043e\u043a\u043e\u043b\u043e 2000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 FortiClient EMS \u0442\u043e\u0440\u0447\u0430\u0442 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u2014 \u0432\u043e\u043f\u0440\u0435\u043a\u0438 \u0432\u0441\u0435\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c Fortinet. \u041d\u043e \u043a\u043e\u0433\u043e \u043a\u043e\u0433\u0434\u0430 \u043e\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438.\n\n\u2699\ufe0f \u041f\u043e\u0447\u0435\u043c\u0443 \u0431\u0430\u0433 \u0432\u043e\u043e\u0431\u0449\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442?\n\n\u0412\u0435\u043a\u0442\u043e\u0440 CVSS:3.1/AV:N/AC:L/PR:N/UI:N \u2014 \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442: \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0431\u0435\u0437 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439, \u0431\u0435\u0437 \u0443\u0447\u0451\u0442\u043a\u0438, \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0436\u0435\u0440\u0442\u0432\u044b. \u041e\u0434\u0438\u043d \u0437\u0430\u043f\u0440\u043e\u0441 \u2014 \u043e\u0434\u0438\u043d \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442.\n\n\u041a\u043e\u0440\u043d\u0435\u0432\u0430\u044f \u043f\u0440\u0438\u0447\u0438\u043d\u0430 \u2014 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 auth-middleware \u043d\u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 API-\u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u0445. \u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0435 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0438 \u043d\u0435 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u2014 \u043e\u043d \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u043a \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u043c \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 route, \u0437\u0430\u0431\u044b\u043b\u0438 \u043d\u0430\u0432\u0435\u0441\u0438\u0442\u044c auth-\u0434\u0435\u043a\u043e\u0440\u0430\u0442\u043e\u0440 \u2014 \u043a\u043b\u0430\u0441\u0441\u0438\u043a\u0430 \u0436\u0430\u043d\u0440\u0430. \u0422\u0430\u043a\u043e\u0439 \u043f\u0430\u0442\u0442\u0435\u0440\u043d \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u0430\u0443\u0434\u0438\u0442\u0435 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 REST API \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e.\n\n\u041e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442: \u0432 \u0440\u0443\u0441\u0441\u043a\u043e\u044f\u0437\u044b\u0447\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430\u0445 \u0433\u0443\u043b\u044f\u0435\u0442 \u043e\u0448\u0438\u0431\u043a\u0430 \u2014 \u044f\u043a\u043e\u0431\u044b \u0432\u0435\u0440\u0441\u0438\u044f 7.4.6 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u042d\u0442\u043e \u043d\u0435\u0432\u0435\u0440\u043d\u043e. \u041f\u043e NVD, \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043e\u0431\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u2014 \u0438 7.4.5, \u0438 7.4.6. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e 7.4.7.\n\n\ud83d\udd17 \u041f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u044b\u0439 \u0432\u0435\u043a\u0442\u043e\u0440\n\nCVE-2026-35616 \u2014 \u043d\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439. CVE-2026-21643 \u2014 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 7.4.4 \u0441 \u0442\u0435\u043c \u0436\u0435 CVSS 9.8 \u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0447\u043d\u044b\u043c \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u043c. \u0414\u0432\u0430 \u0440\u0430\u0437\u043d\u044b\u0445 \u043a\u043b\u0430\u0441\u0441\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c, \u043e\u0434\u043d\u0430 \u0438 \u0442\u0430 \u0436\u0435 \u0446\u0435\u043b\u044c. FortiClient EMS \u044f\u0432\u043d\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0433\u043e security-\u0430\u0443\u0434\u0438\u0442\u0430.\n\n\u041f\u043e\u043b\u043d\u0430\u044f \u043c\u0435\u0445\u0430\u043d\u0438\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u2014 \u043e\u0442 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0438 API bypass \u0434\u043e lateral movement \u0447\u0435\u0440\u0435\u0437 Fortinet-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u2014 \u0432 \u0441\u0442\u0430\u0442\u044c\u0435 \u043d\u0430 \u0444\u043e\u0440\u0443\u043c\u0435.\n\nhttps://codeby.net/threads/cve-2026-35616-ekspluatatsiya-uyazvimosti-forticlient-ems-ot-api-bypass-do-zakhvata-fortinet-infrastruktury.92827/", "creation_timestamp": "2026-04-24T14:31:07.000000Z"}, {"uuid": "e7d8ff1a-a279-4c57-9ca7-6fc3f1279ba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mivrtakokk2z", "content": "", "creation_timestamp": "2026-04-07T12:30:26.691908Z"}, {"uuid": "606f1e4c-64e6-4973-97bb-e02c96bc57f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-forticlient-ems-sql-injection-cve-2026-21643-patch-immediately", "content": "", "creation_timestamp": "2026-03-31T07:45:24.000000Z"}, {"uuid": "c5d31457-d976-4bf9-bfac-f0412a285b47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-07)", "content": "", "creation_timestamp": "2026-04-07T00:00:00.000000Z"}, {"uuid": "ad54a71a-0a80-4673-999b-8a70eb89676a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-21643.yaml", "content": "", "creation_timestamp": "2026-04-08T14:50:19.000000Z"}, {"uuid": "91aaefc2-f3b4-442e-a1b2-7c23d1f01c26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mj67uskoet2t", "content": "", "creation_timestamp": "2026-04-10T21:03:14.766611Z"}, {"uuid": "a25561d5-7f47-4db6-8e3e-76bb5ccf232d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-10)", "content": "", "creation_timestamp": "2026-04-10T00:00:00.000000Z"}, {"uuid": "c649e88f-45c5-41a8-8482-a62244918a01", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9c72f05f-aadd-4a03-8135-59e708f5b797", "content": "", "creation_timestamp": "2026-04-13T18:00:05.722890Z"}, {"uuid": "0f069158-3e34-4c32-99a2-4eb2c36603a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6244764", "content": "", "creation_timestamp": "2026-04-13T18:07:24.569822Z"}, {"uuid": "64862180-7d63-4ed1-9a8a-cf44061c49f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116399043810586963", "content": "", "creation_timestamp": "2026-04-13T19:27:37.161851Z"}, {"uuid": "c5e85bcb-805b-4944-b18d-d31db415d652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mjfnti6xlz25", "content": "", "creation_timestamp": "2026-04-13T20:01:32.249279Z"}, {"uuid": "b2da3a8c-786b-4c84-a786-75839043f7dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://thehackernews.com/2026/04/cisa-adds-6-known-exploited-flaws-in.html", "content": "", "creation_timestamp": "2026-04-14T03:39:00.000000Z"}, {"uuid": "83499dea-88ee-47d8-a74d-b134bde8249d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mjgtvxrwor2l", "content": "", "creation_timestamp": "2026-04-14T07:22:58.030276Z"}, {"uuid": "b0e8d44d-d86d-452f-beb3-8c33ec5b9e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mjibqd4jtf2o", "content": "", "creation_timestamp": "2026-04-14T21:03:11.653409Z"}, {"uuid": "53bbc4b3-aab0-43c9-8ba2-515b073eec44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mjkmckwojl2t", "content": "", "creation_timestamp": "2026-04-15T19:17:29.515736Z"}, {"uuid": "0bccf920-3a4a-4197-8b2a-4c1fd29f260f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mjlec762zf2y", "content": "", "creation_timestamp": "2026-04-16T02:26:47.117644Z"}, {"uuid": "3e609398-66c2-4358-ae20-09b7ac1a7855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/hakksaww.bsky.social/post/3mjmuratsmc2v", "content": "", "creation_timestamp": "2026-04-16T16:54:12.281174Z"}, {"uuid": "d9c46a6a-c819-40b5-89bd-57a4d4ac62b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21643", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116415441570970096", "content": "", "creation_timestamp": "2026-04-16T16:57:47.471000Z"}, {"uuid": "a2882919-7d32-4741-ac12-674f1bf1794c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mjnr7hfapx2n", "content": "", "creation_timestamp": "2026-04-17T01:23:13.019597Z"}, {"uuid": "05274767-cb9e-454b-b258-07c2fba0fc4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mjoes6eapz2d", "content": "", "creation_timestamp": "2026-04-17T07:13:42.881281Z"}, {"uuid": "ab5f7b59-deb6-4b4d-9d47-f6f3e751484e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjpvqtnwnc2y", "content": "", "creation_timestamp": "2026-04-17T21:49:56.801449Z"}, {"uuid": "4ce79e5e-4ef4-4a93-9e1a-48552be7b028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "MISP/8d5d67a3-9fd9-4f53-b1b5-033972fb7fe3", "content": "", "creation_timestamp": "2026-04-18T03:40:13.000000Z"}, {"uuid": "c75c582e-0cdb-4dc4-85f1-a687cbe1d4e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mjuh6tloym2y", "content": "", "creation_timestamp": "2026-04-19T17:12:33.237702Z"}, {"uuid": "18c6c2b6-702a-495e-9544-4ca234c7e19e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "https://t.me/true_secator/8068", "content": "Fortinet \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u043d\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0435\u043c FortiClient (EMS), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-35616 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0441\u0443\u0431\u0431\u043e\u0442\u0443. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c Fortinet \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 FortiClient EMS 7.4.5 \u0438 7.4.6 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043f\u0443\u0442\u0435\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439: \u0434\u043b\u044f FortiClientEMS 7.4.5 (\u0437\u0434\u0435\u0441\u044c) \u0438 \u0434\u043b\u044f FortiClientEMS 7.4.6 (\u0437\u0434\u0435\u0441\u044c). \u041e\u043d\u0430 \u0442\u0430\u043a\u0436\u0435 \u0431\u0443\u0434\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 7.4.7. \u0412\u0435\u0440\u0441\u0438\u044f FortiClient EMS 7.2 \u043d\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Defused, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u0435\u0435 \u043a\u0430\u043a \u043e\u0431\u0445\u043e\u0434 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a API \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0412 Defused \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u00a0\u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043e\u043d\u0438 \u0443\u0436\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438, \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e\u0431 \u044d\u0442\u043e\u043c \u0432 Fortinet \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u043e\u043c \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Shadowserver\u00a0\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 2000 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 FortiClient EMS \u0432 \u0441\u0435\u0442\u0438, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0421\u0428\u0410 \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438.\n\n\u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435\u043c \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 FortiClient EMS\u00a0- CVE-2026-21643, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0438 \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Defused, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Fortinet \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u0437\u0430\u0441\u043b\u0443\u0433\u0443 \u041d\u0433\u0443\u0435\u043d\u0430 \u0414\u044b\u043a \u0410\u043d\u044f \u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\nFortinet \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.4.7, \u043a\u043e\u0433\u0434\u0430 \u043e\u043d\u0430 \u0441\u0442\u0430\u043d\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430, \u0447\u0442\u043e\u0431\u044b \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0440\u0438\u0441\u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438.", "creation_timestamp": "2026-04-06T10:42:31.000000Z"}, {"uuid": "e2b80f24-c5e7-4d9a-9420-3e05eb7bbb17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "Telegram/xkn6bLyn2zcfm_AF1_9eBls30LSnoPI_vfnpkyo6CErGWg", "content": "", "creation_timestamp": "2026-04-14T13:05:33.000000Z"}, {"uuid": "5847ba36-0367-4764-b79e-aacd0f2a19c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "published-proof-of-concept", "source": "Telegram/-Mm1WIsKY7SWT-aPiu8qoZwibl8puKnH0jLwo2Sm3bIN98o", "content": "", "creation_timestamp": "2026-03-28T03:00:05.000000Z"}, {"uuid": "c7737002-c08e-4e0e-beaa-0b08fac3e4f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "published-proof-of-concept", "source": "Telegram/KKi08pVtUDaCAJkb9047w9y4w-ZBtgxVmflDXmeWCTkhF9g", "content": "", "creation_timestamp": "2026-03-29T03:00:06.000000Z"}, {"uuid": "19ec1ae3-ed63-447b-89ee-d04e9c6cd245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "https://t.me/CyberSecurityIL/83105", "content": "\u05e9\u05d9\u05de\u05d5 \u05dc\u05d1 3 \u05d5\u05d0\u05d7\u05e8\u05d5\u05df - \u05d7\u05d5\u05dc\u05e9\u05d4 \u05d1-FortiClient EMS (CVE-2026-21643) \u05de\u05e0\u05d5\u05e6\u05dc\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05e2\u05dc \u05d9\u05d3\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05de\u05e1\u05d1\u05d9\u05d1 \u05dc\u05e2\u05d5\u05dc\u05dd.\n\nhttps://t.me/CyberSecurityIL/8695", "creation_timestamp": "2026-03-30T20:03:39.000000Z"}, {"uuid": "9fa601fa-cee9-4e30-a3fa-8a84197a4e32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/77554", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-21643\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a alirezac0\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-03-27 19:20:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPython PoC and Nuclei template for CVE-2026-21643 (Pre-Authentication SQL Injection in FortiClient EMS 7.4.4)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-03-27T20:00:04.000000Z"}, {"uuid": "922a3ddc-7658-49d9-bc1c-fe011df79b6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/GithubRedTeam/77697", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-21643\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-03-28 19:43:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-21643\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-03-28T20:00:04.000000Z"}, {"uuid": "c10ac220-7a62-450c-8549-f20d16641cba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "https://t.me/true_secator/8043", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Defused \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043d\u0438\u0438 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u044f \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 FortiClient EMS \u043e\u0442 Fortinet.\n\nSQL-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-21643, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0430\u0442\u0430\u043a \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f FortiClientEMS \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0413\u0432\u0435\u043d\u0434\u0430\u043b\u0435\u043c \u0413\u0435\u043d\u044c\u043e \u0438\u0437 \u0433\u0440\u0443\u043f\u043f\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Fortinet \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Site \u0432 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0435. \n\n\u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u044e FortiClient EMS 7.4.4 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043f\u0443\u0442\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.4.5 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shodan, \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043e\u043a\u043e\u043b\u043e 1000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Forticlient EMS. \n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Defused, CVE-2026-21643 \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u0430 \u043a\u0430\u043a \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f \u0432 \u0441\u043f\u0438\u0441\u043a\u0430\u0445 CISA \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0447\u0435\u0442\u0430\u0445 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (KEV), \u043d\u043e \u0431\u044b\u043b\u0430 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0435\u0449\u0435 4 \u0434\u043d\u044f \u043d\u0430\u0437\u0430\u0434.\n\nFortinet, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u043f\u043e\u043a\u0430 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0441\u0432\u043e\u0435\u00a0\u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00a0\u0438 \u043d\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u0418 \u0432 \u0446\u0435\u043b\u043e\u043c \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u0435\u0442 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u043e \u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u0432\u043e\u0434\u0443, \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u0443\u044f.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Shadowserver \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 2000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 FortiClient EMS\u00a0\u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0432 \u0441\u0435\u0442\u0438 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c\u0438, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0431\u043e\u043b\u0435\u0435 1400 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u0421\u0428\u0410 \u0438 \u0415\u0432\u0440\u043e\u043f\u0435.\n\n\u0414\u0430\u043d\u043d\u044b\u0435 Shodan\u00a0\u0440\u0438\u0441\u0443\u044e\u0442 \u0432 \u0446\u0435\u043b\u043e\u043c \u043f\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u043c Fortinet \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u0443\u044e \u043a\u0430\u0440\u0442\u0438\u043d\u0443.\n\n\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 CISA\u00a0\u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0430\u0435\u0442 24\u00a0\u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Fortinet, 13 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c ransomware.", "creation_timestamp": "2026-03-30T11:14:29.000000Z"}, {"uuid": "5c7fee1a-0d0d-480c-81b6-77adc6a3681b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "https://t.me/true_secator/7895", "content": "Fortinet \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 FortiClientEMS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-21643\u00a0\u0438 \u0438\u043c\u0435\u0435\u0442 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 CVSS 9,1 \u0438\u0437 10 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445. \u041e\u043d\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SQL-\u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 FortiClientEMS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0413\u0432\u0435\u043d\u0434\u0430\u043b\u0443 \u0413\u0435\u043d\u044c\u043e \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Fortinet. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 FortiClientEMS 7.4.4 (\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.4.5 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435), FortiClientEMS 7.2 \u0438 FortiClientEMS 8.0 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u044b \u043a\u0430\u043a \u043d\u0435\u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 Fortinet \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0439 CVE-2026-24858 \u0432 FortiOS, FortiManager, FortiAnalyzer, FortiProxy, FortiWeb, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e FortiCloud \u0438 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0432\u0445\u043e\u0434\u0438\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 FortiCloud SSO.\n\n\u0412\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 Fortinet \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0435\u0435 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0434\u043b\u044f  \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0434\u043e\u0441\u0442\u0443\u043f \u043a VPN, \u0438 \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430.", "creation_timestamp": "2026-02-10T15:10:05.000000Z"}, {"uuid": "a779bcf2-eb8d-4fcd-9905-61c30cc65e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/8380", "content": "\ud83d\udea8\ud83d\udee1\ufe0f Fortinet Fixes Critical FortiClientEMS RCE (CVE-2026-21643, CVSS 9.1).\n\nSQL injection flaw enables unauthenticated remote command execution via crafted requests. Affects EMS 7.4.4 (patch available).\n\nSeparate FortiCloud SSO bug is actively exploited for admin persistence and firewall config theft.\n\n\ud83d\udd17 See affected versions and patch guidance \u2192 https://thehackernews.com/2026/02/fortinet-patches-critical-sqli-flaw.html", "creation_timestamp": "2026-02-10T04:44:13.000000Z"}, {"uuid": "6e915af6-7ff4-4dd2-af8b-8e19dd47c82c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/ics_cert/1397", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627\u0628\u0637 \u0648\u0628 \u0633\u0631\u0648\u0631 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc Fortinet FortiClient Enterprise Management Server (EMS) \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0639\u062f\u0645 \u0627\u062a\u062e\u0627\u0630 \u062a\u062f\u0627\u0628\u06cc\u0631 \u0645\u062d\u0627\u0641\u0638\u062a\u06cc \u0628\u0631\u0627\u06cc \u0633\u0627\u062e\u062a\u0627\u0631 \u062f\u0631\u062e\u0648\u0627\u0633\u062a SQL \u0627\u0633\u062a. \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0646\u0641\u0648\u0630\u06af\u0631\u06cc \u06a9\u0647 \u0628\u0647 \u0635\u0648\u0631\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0639\u0645\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc HTTP \u0628\u0647\u200c\u0637\u0648\u0631 \u062e\u0627\u0635 \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f.\n\nBDU:2026-01492\nCVE-2026-21643\n\n\u0646\u0635\u0628 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0645\u0639\u062a\u0628\u0631.  \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u062a\u0646\u0647\u0627 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645\u06cc \u0631\u06cc\u0633\u06a9\u200c\u0647\u0627\u06cc \u0645\u0631\u062a\u0628\u0637 \u0646\u0635\u0628 \u0634\u0648\u0646\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u0648\u0628 (WAF) \u0628\u0631\u0627\u06cc \u0641\u06cc\u0644\u062a\u0631 \u06a9\u0631\u062f\u0646 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0634\u0628\u06a9\u0647\u061b\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0631\u0627\u0628\u0637 \u0648\u0628 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0637\u0631\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0631 \u0627\u0633\u0627\u0633 \u00ab\u0641\u0647\u0631\u0633\u062a\u200c\u0647\u0627\u06cc \u0633\u0641\u06cc\u062f\u00bb\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u062a\u0634\u062e\u06cc\u0635 \u0648 \u067e\u06cc\u0634\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0646\u0641\u0648\u0630 \u0628\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc (\u06a9\u0634\u0641\u060c \u062b\u0628\u062a) \u0648 \u0648\u0627\u06a9\u0646\u0634 \u0628\u0647 \u062a\u0644\u0627\u0634\u200c\u0647\u0627\u06cc \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u061b\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u062e\u0627\u0631\u062c\u06cc (\u0627\u06cc\u0646\u062a\u0631\u0646\u062a)\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u062e\u0635\u0648\u0635\u06cc \u0645\u062c\u0627\u0632\u06cc \u0628\u0631\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u062f\u0647\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (VPN).\n\n\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0648\u0635\u06cc\u0647\u200c\u0647\u0627:\nhttps://fortiguard.fortinet.com/psirt/FG-IR-25-1142\n\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed  \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "creation_timestamp": "2026-02-13T16:03:28.000000Z"}, {"uuid": "e48697b1-ae95-4e34-9b25-dc2cab9fc452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21643", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mkivy3b6n32p", "content": "", "creation_timestamp": "2026-04-27T20:30:26.673646Z"}, {"uuid": "9dc5e3a8-d4cd-42ff-8483-23b9f72ba507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-29)", "content": "", "creation_timestamp": "2026-04-29T00:00:00.000000Z"}, {"uuid": "0a519672-b9ac-438f-8de5-a16a368da924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-29)", "content": "", "creation_timestamp": "2026-04-29T00:00:00.000000Z"}, {"uuid": "14cd74af-93e9-48de-a5e1-b2b9cd851e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-30)", "content": "", "creation_timestamp": "2026-04-30T00:00:00.000000Z"}, {"uuid": "c52bceab-c794-4e04-a716-5d931a4e30e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-31)", "content": "", "creation_timestamp": "2026-08-01T10:15:08.788558Z"}, {"uuid": "82020687-6ff2-4585-9235-a9ec629e761c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/CyberDispatch/689", "content": "Fortinet Fixes Critical FortiClientEMS RCE (CVE-2026-21643, CVSS 9.1).\n\nSQL injection flaw enables unauthenticated remote command execution via crafted requests. Affects EMS 7.4.4 (patch available).\n\nSeparate FortiCloud SSO bug is actively exploited for admin persistence and firewall config theft.", "creation_timestamp": "2026-08-30T00:00:48.057154Z"}, {"uuid": "513cff9a-36e2-4e29-b1e9-43069b4ccfbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-04)", "content": "", "creation_timestamp": "2026-05-04T00:00:00.000000Z"}, {"uuid": "1cfcbac0-0eac-4820-962d-f39a5092294e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-04)", "content": "", "creation_timestamp": "2026-05-04T00:00:00.000000Z"}, {"uuid": "bbda0bc3-2ef5-481e-bf75-00b7e0c2f7d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-05)", "content": "", "creation_timestamp": "2026-05-05T00:00:00.000000Z"}, {"uuid": "efb12762-ce7a-4400-b8c3-27e7535f0a02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-06)", "content": "", "creation_timestamp": "2026-05-06T00:00:00.000000Z"}, {"uuid": "ed242c1f-c2ac-4f6e-ab3d-f14267397191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-07)", "content": "", "creation_timestamp": "2026-05-07T00:00:00.000000Z"}, {"uuid": "4a6327ed-b7fe-4b9e-88b7-6f2d9d6507ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-08)", "content": "", "creation_timestamp": "2026-05-08T00:00:00.000000Z"}, {"uuid": "5ad6c9e9-772e-4fef-aa0d-4ada56723ef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-08)", "content": "", "creation_timestamp": "2026-05-08T00:00:00.000000Z"}, {"uuid": "24c36796-7cab-411d-934a-a5d14a00a849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/CyberDispatch/736", "content": "Fortinet Fixes Critical FortiClientEMS RCE (CVE-2026-21643, CVSS 9.1).\n\nSQL injection flaw enables unauthenticated remote command execution via crafted requests. Affects EMS 7.4.4 (patch available).\n\nSeparate FortiCloud SSO bug is actively exploited for admin persistence and firewall config theft.", "creation_timestamp": "2026-08-29T20:00:21.589860Z"}, {"uuid": "5add7983-a42c-4928-97f7-75b2ef96b51d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/CyberDispatch/689", "content": "Fortinet Fixes Critical FortiClientEMS RCE (CVE-2026-21643, CVSS 9.1).\n\nSQL injection flaw enables unauthenticated remote command execution via crafted requests. Affects EMS 7.4.4 (patch available).\n\nSeparate FortiCloud SSO bug is actively exploited for admin persistence and firewall config theft.", "creation_timestamp": "2026-08-29T20:00:22.236240Z"}, {"uuid": "c4c42fb4-d61b-475d-b2b6-f505084eb0ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-21)", "content": "", "creation_timestamp": "2026-05-21T00:00:00.000000Z"}, {"uuid": "6e64a7e9-0c93-44bb-87c0-82e346a01da7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-24)", "content": "", "creation_timestamp": "2026-05-24T00:00:00.000000Z"}, {"uuid": "656327f7-d614-464f-a550-d1c4b6ac03db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-25)", "content": "", "creation_timestamp": "2026-05-25T00:00:00.000000Z"}, {"uuid": "3034be60-f267-41d2-8c54-7237f0559d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-26)", "content": "", "creation_timestamp": "2026-05-26T00:00:00.000000Z"}, {"uuid": "f57be511-7cb0-4d8b-80c2-5708eedf72f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-13)", "content": "", "creation_timestamp": "2026-08-14T10:00:18.965131Z"}, {"uuid": "4b439c86-8ac8-4f15-99a4-dbe868844976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-28)", "content": "", "creation_timestamp": "2026-05-28T00:00:00.000000Z"}, {"uuid": "c9f8eedc-4470-4fe9-8949-222d448e8323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-11)", "content": "", "creation_timestamp": "2026-08-12T10:15:10.615388Z"}, {"uuid": "544bc1db-4a10-47c3-871b-e9b05445354a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-03)", "content": "", "creation_timestamp": "2026-06-03T00:00:00.000000Z"}, {"uuid": "84e42386-4ad8-4614-bc6d-7aa43fc20e1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-05)", "content": "", "creation_timestamp": "2026-06-05T00:00:00.000000Z"}, {"uuid": "66671dd3-afb4-4118-aa83-e6327193e092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/VulnerabilityNews/41878", "content": "CISA Adds Seven Known Exploited Vulnerabilities to Catalog\n\nCISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2012-1854 Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability\nCVE-2020-9715 Adobe Acrobat Use-After-Free Vulnerability\nCVE-2023-21529 Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability\nCVE-2023-36424 Microsoft Windows Out-of-Bounds Read Vulnerability\nCVE-2025-60710 Microsoft Windows Link Following Vulnerability\nCVE-2026-21643 Fortinet SQL Injection Vulnerability\nCVE-2026-34621 Adobe Acrobat and Reader Prototype Pollution Vulnerability\nThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/04/13/cisa-adds-seven-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-08-18T19:00:05.597512Z"}, {"uuid": "4cfa2859-8b34-49b0-8ca5-06d5412a8cec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/VulnerabilityNews/41922", "content": "CISA Adds 6 Known Exploited Flaws in Fortinet, Microsoft, and Adobe Software\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on\u00a0Monday added half a dozen security flaws to its Known Exploited Vulnerabilities\u00a0(KEV) catalog, citing evidence of active exploitation.\nThe list of vulnerabilities is as follows\u00a0-\n\nCVE-2026-21643 (CVSS score: 9.1) -\u00a0 An SQL injection vulnerability in\u00a0 Fortinet FortiClient EMS that could allow an\nhttps://thehackernews.com/2026/04/cisa-adds-6-known-exploited-flaws-in.html", "creation_timestamp": "2026-08-18T19:00:04.986973Z"}, {"uuid": "10ee61db-4925-4684-a496-30a089a06e64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-20)", "content": "", "creation_timestamp": "2026-08-21T10:15:11.390811Z"}, {"uuid": "e3c37786-5f33-408e-b17e-d0ff6b936649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-14)", "content": "", "creation_timestamp": "2026-06-14T00:00:00.000000Z"}, {"uuid": "3465c1b1-df18-465d-af63-1b83b41957c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-29)", "content": "", "creation_timestamp": "2026-08-30T10:15:08.522254Z"}, {"uuid": "ff371fd0-0294-4de1-a236-daa2443f0acd", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e623b53b-184e-428b-8ca1-72c843727c86", "content": "", "creation_timestamp": "2026-06-19T12:45:32.380211Z"}, {"uuid": "422eefed-e688-470a-bd20-625487a597ba", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/82511421-8748-4c5b-8ef3-1deffaba12cd", "content": "", "creation_timestamp": "2026-06-23T14:03:40.070102Z"}, {"uuid": "2b36d803-254c-4040-918e-3e1ff549a959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://www.acn.gov.it/portale/w/fortibleed-esposizione-di-credenziali-ssl-vpn-associate-a-dispositivi-fortinet-esposti-su-internet", "content": "", "creation_timestamp": "2026-06-25T16:45:22.919022Z"}, {"uuid": "239f19a9-7393-472b-8efa-40c1dbe5b8ff", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/60ec08e2-667c-4cb0-b78c-ac4058db2559", "content": "", "creation_timestamp": "2026-06-30T09:23:17.434808Z"}, {"uuid": "ca926ca1-f7f7-4700-9639-c549752ec4f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "https://t.me/VulnerabilityNews/41878", "content": "CISA Adds Seven Known Exploited Vulnerabilities to Catalog\n\nCISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2012-1854 Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability\nCVE-2020-9715 Adobe Acrobat Use-After-Free Vulnerability\nCVE-2023-21529 Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability\nCVE-2023-36424 Microsoft Windows Out-of-Bounds Read Vulnerability\nCVE-2025-60710 Microsoft Windows Link Following Vulnerability\nCVE-2026-21643 Fortinet SQL Injection Vulnerability\nCVE-2026-34621 Adobe Acrobat and Reader Prototype Pollution Vulnerability\nThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/04/13/cisa-adds-seven-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-08-19T00:00:08.127149Z"}, {"uuid": "e4d14bc8-5e17-4d08-aa2f-8c28d851cb90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "https://t.me/VulnerabilityNews/41922", "content": "CISA Adds 6 Known Exploited Flaws in Fortinet, Microsoft, and Adobe Software\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on\u00a0Monday added half a dozen security flaws to its Known Exploited Vulnerabilities\u00a0(KEV) catalog, citing evidence of active exploitation.\nThe list of vulnerabilities is as follows\u00a0-\n\nCVE-2026-21643 (CVSS score: 9.1) -\u00a0 An SQL injection vulnerability in\u00a0 Fortinet FortiClient EMS that could allow an\nhttps://thehackernews.com/2026/04/cisa-adds-6-known-exploited-flaws-in.html", "creation_timestamp": "2026-08-19T00:00:08.931440Z"}, {"uuid": "df575c11-9620-4e7e-a5df-3eb4de63256b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "Telegram/CBsReMpodfPVz9h3mUnGa4mfgUWVBvlQLb05-2JDq6QI", "content": "", "creation_timestamp": "2026-08-19T23:00:04.107549Z"}, {"uuid": "688782fc-06f6-4a45-8c47-5b85483fdb4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "Telegram/CBsReMpodfPVz9h3mUnGa4mfgUWVBvlQLb05-2JDq6QI", "content": "", "creation_timestamp": "2026-08-20T00:00:07.248773Z"}, {"uuid": "f905a9c8-acc7-4b85-ad51-7ca4138e8b9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/brutsecurity/2605", "content": "\ud83d\udea8 Bug Bounty / Red Team Tip\n\nCVE-2026-21643 \u2014 Critical Pre-Auth SQL Injection (CVSS 9.1) in FortiClient EMS 7.4.4 (multi-tenant mode only)\n\nUnauthenticated attackers can inject arbitrary SQL via the Site HTTP header to the public endpoint /api/v1/init_consts (or login endpoint). This happens before authentication and hits the PostgreSQL backend with superuser-level access in many setups \u2192 full DB dump, schema extraction, or RCE (via PostgreSQL features like COPY FROM PROGRAM).\n\n- Affected: Only FortiClient EMS 7.4.4 (multi-tenant/Sites feature enabled)\n- Not affected: 7.2.x, 8.0.x, single-site deployments\n- Fixed: Upgrade to 7.4.5 or later\n- Status: Actively exploited in the wild + public PoCs available\n\nMain Detail Article (Highly Recommended):  \nBishop Fox deep-dive with exploitation paths, payloads (e.g., pg_sleep(5) for blind testing), and lab results \u2192  \nhttps://bishopfox.com/blog/cve-2026-21643-pre-authentication-sql-injection-in-forticlient-ems-7-4-4\n\nPublic PoC (GitHub):  \nhttps://github.com/0xBlackash/CVE-2026-21643\n\nUseful Google/Shodan Dorks:\n- http.title:\"FortiClient EMS\" \"7.4.4\"\n- http.html:\"FortiClient Enterprise Management Server\"\n- http.favicon.hash: -specific-hash (or search for EMS login page)\n- Shodan: \"Model: FCTEMS\" or \"FortiClient EMS\"\n\nQuick Check:\nIf your EMS login page is internet-facing and running 7.4.4 with multi-tenant enabled \u2192 patch ASAP or block public access. Thousands of instances are exposed (Shadowserver ~2k+, Shodan ~1k+).\n\nHigh-value target for hunters. Patch or restrict immediately!\n\n#BugBounty #RedTeam #Fortinet #CVE202621643 #SQLi", "creation_timestamp": "2026-07-09T03:00:05.673848Z"}, {"uuid": "1ff0f56d-a2ec-4671-9389-132e9161a1a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/brutsecurity/2605", "content": "\ud83d\udea8 Bug Bounty / Red Team Tip\n\nCVE-2026-21643 \u2014 Critical Pre-Auth SQL Injection (CVSS 9.1) in FortiClient EMS 7.4.4 (multi-tenant mode only)\n\nUnauthenticated attackers can inject arbitrary SQL via the Site HTTP header to the public endpoint /api/v1/init_consts (or login endpoint). This happens before authentication and hits the PostgreSQL backend with superuser-level access in many setups \u2192 full DB dump, schema extraction, or RCE (via PostgreSQL features like COPY FROM PROGRAM).\n\n- Affected: Only FortiClient EMS 7.4.4 (multi-tenant/Sites feature enabled)\n- Not affected: 7.2.x, 8.0.x, single-site deployments\n- Fixed: Upgrade to 7.4.5 or later\n- Status: Actively exploited in the wild + public PoCs available\n\nMain Detail Article (Highly Recommended):  \nBishop Fox deep-dive with exploitation paths, payloads (e.g., pg_sleep(5) for blind testing), and lab results \u2192  \nhttps://bishopfox.com/blog/cve-2026-21643-pre-authentication-sql-injection-in-forticlient-ems-7-4-4\n\nPublic PoC (GitHub):  \nhttps://github.com/0xBlackash/CVE-2026-21643\n\nUseful Google/Shodan Dorks:\n- http.title:\"FortiClient EMS\" \"7.4.4\"\n- http.html:\"FortiClient Enterprise Management Server\"\n- http.favicon.hash: -specific-hash (or search for EMS login page)\n- Shodan: \"Model: FCTEMS\" or \"FortiClient EMS\"\n\nQuick Check:\nIf your EMS login page is internet-facing and running 7.4.4 with multi-tenant enabled \u2192 patch ASAP or block public access. Thousands of instances are exposed (Shadowserver ~2k+, Shodan ~1k+).\n\nHigh-value target for hunters. Patch or restrict immediately!\n\n#BugBounty #RedTeam #Fortinet #CVE202621643 #SQLi", "creation_timestamp": "2026-07-10T00:00:12.994174Z"}, {"uuid": "4bf867a3-3d62-480c-bb17-211eb61a65ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "https://t.me/brutsecurity/2605", "content": "\ud83d\udea8 Bug Bounty / Red Team Tip\n\nCVE-2026-21643 \u2014 Critical Pre-Auth SQL Injection (CVSS 9.1) in FortiClient EMS 7.4.4 (multi-tenant mode only)\n\nUnauthenticated attackers can inject arbitrary SQL via the Site HTTP header to the public endpoint /api/v1/init_consts (or login endpoint). This happens before authentication and hits the PostgreSQL backend with superuser-level access in many setups \u2192 full DB dump, schema extraction, or RCE (via PostgreSQL features like COPY FROM PROGRAM).\n\n- Affected: Only FortiClient EMS 7.4.4 (multi-tenant/Sites feature enabled)\n- Not affected: 7.2.x, 8.0.x, single-site deployments\n- Fixed: Upgrade to 7.4.5 or later\n- Status: Actively exploited in the wild + public PoCs available\n\nMain Detail Article (Highly Recommended):  \nBishop Fox deep-dive with exploitation paths, payloads (e.g., pg_sleep(5) for blind testing), and lab results \u2192  \nhttps://bishopfox.com/blog/cve-2026-21643-pre-authentication-sql-injection-in-forticlient-ems-7-4-4\n\nPublic PoC (GitHub):  \nhttps://github.com/0xBlackash/CVE-2026-21643\n\nUseful Google/Shodan Dorks:\n- http.title:\"FortiClient EMS\" \"7.4.4\"\n- http.html:\"FortiClient Enterprise Management Server\"\n- http.favicon.hash: -specific-hash (or search for EMS login page)\n- Shodan: \"Model: FCTEMS\" or \"FortiClient EMS\"\n\nQuick Check:\nIf your EMS login page is internet-facing and running 7.4.4 with multi-tenant enabled \u2192 patch ASAP or block public access. Thousands of instances are exposed (Shadowserver ~2k+, Shodan ~1k+).\n\nHigh-value target for hunters. Patch or restrict immediately!\n\n#BugBounty #RedTeam #Fortinet #CVE202621643 #SQLi", "creation_timestamp": "2026-07-11T10:00:05.407445Z"}, {"uuid": "38fab588-5355-4254-a40f-76b591d8f70d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "https://t.me/brutsecurity/2605", "content": "\ud83d\udea8 Bug Bounty / Red Team Tip\n\nCVE-2026-21643 \u2014 Critical Pre-Auth SQL Injection (CVSS 9.1) in FortiClient EMS 7.4.4 (multi-tenant mode only)\n\nUnauthenticated attackers can inject arbitrary SQL via the Site HTTP header to the public endpoint /api/v1/init_consts (or login endpoint). This happens before authentication and hits the PostgreSQL backend with superuser-level access in many setups \u2192 full DB dump, schema extraction, or RCE (via PostgreSQL features like COPY FROM PROGRAM).\n\n- Affected: Only FortiClient EMS 7.4.4 (multi-tenant/Sites feature enabled)\n- Not affected: 7.2.x, 8.0.x, single-site deployments\n- Fixed: Upgrade to 7.4.5 or later\n- Status: Actively exploited in the wild + public PoCs available\n\nMain Detail Article (Highly Recommended):  \nBishop Fox deep-dive with exploitation paths, payloads (e.g., pg_sleep(5) for blind testing), and lab results \u2192  \nhttps://bishopfox.com/blog/cve-2026-21643-pre-authentication-sql-injection-in-forticlient-ems-7-4-4\n\nPublic PoC (GitHub):  \nhttps://github.com/0xBlackash/CVE-2026-21643\n\nUseful Google/Shodan Dorks:\n- http.title:\"FortiClient EMS\" \"7.4.4\"\n- http.html:\"FortiClient Enterprise Management Server\"\n- http.favicon.hash: -specific-hash (or search for EMS login page)\n- Shodan: \"Model: FCTEMS\" or \"FortiClient EMS\"\n\nQuick Check:\nIf your EMS login page is internet-facing and running 7.4.4 with multi-tenant enabled \u2192 patch ASAP or block public access. Thousands of instances are exposed (Shadowserver ~2k+, Shodan ~1k+).\n\nHigh-value target for hunters. Patch or restrict immediately!\n\n#BugBounty #RedTeam #Fortinet #CVE202621643 #SQLi", "creation_timestamp": "2026-07-12T00:00:51.983265Z"}, {"uuid": "423a3616-417b-4fc8-9966-34823e5fc2f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-11)", "content": "", "creation_timestamp": "2026-07-12T10:15:10.283083Z"}, {"uuid": "20fdc2be-eadf-4e0d-a0e9-5de48726f3c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-17)", "content": "", "creation_timestamp": "2026-08-18T10:15:13.379065Z"}, {"uuid": "bf4497d9-6622-432a-81f0-7aadf4cb2fc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-30)", "content": "", "creation_timestamp": "2026-08-31T10:15:10.631215Z"}, {"uuid": "1f3d424e-73d1-44bb-9d10-99d5d5940e8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/cve0day/318", "content": "CVE-2026-21643\n\nAn improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.\n\nGitHub Link:\nhttps://github.com/alirezac0/CVE-2026-21643", "creation_timestamp": "2026-08-28T00:00:40.752730Z"}, {"uuid": "a7933a38-d00a-475d-9b92-2888c53dae71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-18)", "content": "", "creation_timestamp": "2026-07-19T10:00:07.012732Z"}, {"uuid": "9b1a84ce-140f-4139-8a48-8026857d1899", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-18)", "content": "", "creation_timestamp": "2026-07-19T10:15:10.658217Z"}, {"uuid": "c7187964-695a-416b-a6e8-5482c7ea6575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/critical_bug/1699", "content": "\ud83d\udea8 \u0412\u0442\u043e\u0440\u043e\u0439 \u0443\u0434\u0430\u0440 \u0437\u0430 \u043c\u0435\u0441\u044f\u0446: \u043d\u043e\u0432\u044b\u0439 Zero-Day \u0432 Fortinet FortiClient EMS\n\nCVE-2026-35616 \ud83d\udd34 CVSS: 9.1 Critical\n\nFortinet \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 FortiClient EMS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438! \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0435\u0449\u0451 31 \u043c\u0430\u0440\u0442\u0430 \u2014 \u0437\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0430! \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u041d\u0435\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (CWE-284) \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 API-\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u2014 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0435\u0433\u043e \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043b\u043e\u0433\u0438\u043d\u0430 \u0438 \u043f\u0430\u0440\u043e\u043b\u044f. \u041e\u0434\u0438\u043d \u0437\u0430\u043f\u0440\u043e\u0441 \u2192 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0441\u0435\u0439 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u044c\u044e!\n\n\ud83c\udfaf \u041f\u043e\u0447\u0435\u043c\u0443 \u044d\u0442\u043e \u0442\u0430\u043a \u043e\u043f\u0430\u0441\u043d\u043e?\nFortiClient EMS \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 \u0432\u0441\u0435\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u0432 \u0441\u0435\u0442\u0438. \u0412\u0437\u043b\u043e\u043c\u0430\u0432 EMS, \u0445\u0430\u043a\u0435\u0440 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043a\u043b\u044e\u0447\u0438 \u043e\u0442 \u0432\u0441\u0435\u0433\u043e \u043a\u043e\u0440\u043e\u043b\u0435\u0432\u0441\u0442\u0432\u0430 \ud83d\udc51\n\n\ud83d\udea8 \u042d\u0442\u043e \u0443\u0436\u0435 \u0432\u0442\u043e\u0440\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 FortiClient EMS \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 (\u043f\u043e\u0441\u043b\u0435 CVE-2026-21643). Fortinet, \u0442\u044b \u0432 \u043f\u043e\u0440\u044f\u0434\u043a\u0435? \ud83e\udd14\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441?\n1\ufe0f\u20e3 \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e: \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b 7.4.5 \u0438 7.4.6\n2\ufe0f\u20e3 \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u0445\u043e\u0442\u0444\u0438\u043a\u0441 \u043e\u0442 Fortinet\n3\ufe0f\u20e3 \u0423\u0431\u0440\u0430\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0437 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 (\u0442\u043e\u043b\u044c\u043a\u043e VPN!)\n4\ufe0f\u20e3 \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043b\u043e\u0433\u0438 API \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0441 \u0434\u0435\u0442\u0430\u043b\u044f\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n\ud83d\udc8e \u042d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0440\u0430\u043d\u044c\u0448\u0435 \u0432\u0441\u0435\u0445 \u2014 VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su \ud83d\ude80\n\n#Fortinet #CVE #ZeroDay #RCE #FortiClient #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-19T16:00:10.844204Z"}, {"uuid": "409adb01-ae54-4530-a641-c2e42ce983ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/critical_bug/1682", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-21643: SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 Fortinet FortiClient EMS", "creation_timestamp": "2026-07-19T16:00:11.495329Z"}, {"uuid": "3dc2006d-226b-4bc6-9071-b08db0bbc0cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/critical_bug/1680", "content": "\ud83d\udc31 \u042f \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445. \u042f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u042f \u0432\u0435\u0437\u0434\u0435... (\u044d\u0442\u043e \u043d\u0435 \u044f, \u044d\u0442\u043e CVE-2026-21643)", "creation_timestamp": "2026-07-19T16:00:11.426147Z"}, {"uuid": "f0a9bcb2-2aa4-4f74-ae0a-34f29a3549df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/critical_bug/1681", "content": "\ud83d\udd25 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 FortiClient EMS: CVE-2026-21643 \ud83d\udd34 CVSS 9.8\n\n\u0412 Fortinet FortiClient Endpoint Management Server (EMS) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438! \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f (CWE-89) \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u0430 (tenant). HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432 SQL-\u0437\u0430\u043f\u0440\u043e\u0441 \u043a PostgreSQL \u0431\u0435\u0437 \u043e\u0447\u0438\u0441\u0442\u043a\u0438. \u0421\u0430\u043c\u043e\u0435 \u0441\u0442\u0440\u0430\u0448\u043d\u043e\u0435 \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0414\u041e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438!\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442: \u041c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u043e\u0434\u0438\u043d HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a:\n\u2014 \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432\n\u2014 \u0438\u043d\u0432\u0435\u043d\u0442\u0430\u0440\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u043e\u0432\n\u2014 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\u2014 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shodan, \u043e\u043a\u043e\u043b\u043e 1000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0442\u043e\u0440\u0447\u0430\u0442 \u0433\u043e\u043b\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u043a\u043e\u0439 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \ud83e\udd2f\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n1\ufe0f\u20e3 \u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c FortiClient EMS 7.4.4 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.4.5 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435. \u0412\u0435\u0440\u0441\u0438\u0438 7.2 \u0438 8.0 \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n2\ufe0f\u20e3 \u0423\u0431\u0440\u0430\u0442\u044c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 EMS \u0438\u0437 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0422\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 VPN!\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n\ud83d\udc8e \u042d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0440\u0430\u043d\u044c\u0448\u0435 \u0432\u0441\u0435\u0445 \u2014 VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: https://vip.eh.su \ud83d\ude80\n\n#Fortinet #CVE #SQLi #ZeroDay #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-19T16:00:11.458876Z"}, {"uuid": "dab963de-64cb-4132-a72a-ae2f7eec0677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "https://t.me/critical_bug/1699", "content": "\ud83d\udea8 \u0412\u0442\u043e\u0440\u043e\u0439 \u0443\u0434\u0430\u0440 \u0437\u0430 \u043c\u0435\u0441\u044f\u0446: \u043d\u043e\u0432\u044b\u0439 Zero-Day \u0432 Fortinet FortiClient EMS\n\nCVE-2026-35616 \ud83d\udd34 CVSS: 9.1 Critical\n\nFortinet \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 FortiClient EMS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438! \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0435\u0449\u0451 31 \u043c\u0430\u0440\u0442\u0430 \u2014 \u0437\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0430! \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u041d\u0435\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (CWE-284) \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 API-\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u2014 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0435\u0433\u043e \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043b\u043e\u0433\u0438\u043d\u0430 \u0438 \u043f\u0430\u0440\u043e\u043b\u044f. \u041e\u0434\u0438\u043d \u0437\u0430\u043f\u0440\u043e\u0441 \u2192 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0441\u0435\u0439 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u044c\u044e!\n\n\ud83c\udfaf \u041f\u043e\u0447\u0435\u043c\u0443 \u044d\u0442\u043e \u0442\u0430\u043a \u043e\u043f\u0430\u0441\u043d\u043e?\nFortiClient EMS \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 \u0432\u0441\u0435\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u0432 \u0441\u0435\u0442\u0438. \u0412\u0437\u043b\u043e\u043c\u0430\u0432 EMS, \u0445\u0430\u043a\u0435\u0440 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043a\u043b\u044e\u0447\u0438 \u043e\u0442 \u0432\u0441\u0435\u0433\u043e \u043a\u043e\u0440\u043e\u043b\u0435\u0432\u0441\u0442\u0432\u0430 \ud83d\udc51\n\n\ud83d\udea8 \u042d\u0442\u043e \u0443\u0436\u0435 \u0432\u0442\u043e\u0440\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 FortiClient EMS \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 (\u043f\u043e\u0441\u043b\u0435 CVE-2026-21643). Fortinet, \u0442\u044b \u0432 \u043f\u043e\u0440\u044f\u0434\u043a\u0435? \ud83e\udd14\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441?\n1\ufe0f\u20e3 \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e: \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b 7.4.5 \u0438 7.4.6\n2\ufe0f\u20e3 \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u0445\u043e\u0442\u0444\u0438\u043a\u0441 \u043e\u0442 Fortinet\n3\ufe0f\u20e3 \u0423\u0431\u0440\u0430\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0437 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 (\u0442\u043e\u043b\u044c\u043a\u043e VPN!)\n4\ufe0f\u20e3 \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043b\u043e\u0433\u0438 API \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0441 \u0434\u0435\u0442\u0430\u043b\u044f\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n\ud83d\udc8e \u042d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0440\u0430\u043d\u044c\u0448\u0435 \u0432\u0441\u0435\u0445 \u2014 VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su \ud83d\ude80\n\n#Fortinet #CVE #ZeroDay #RCE #FortiClient #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-20T00:00:06.447577Z"}, {"uuid": "8250ed14-80b3-4e57-8620-bffd81b835f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/critical_bug/1680", "content": "\ud83d\udc31 \u042f \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445. \u042f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u042f \u0432\u0435\u0437\u0434\u0435... (\u044d\u0442\u043e \u043d\u0435 \u044f, \u044d\u0442\u043e CVE-2026-21643)", "creation_timestamp": "2026-07-20T00:00:25.425007Z"}, {"uuid": "5eb33e33-24e6-4cdc-aadd-d64faa4c62d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/critical_bug/1681", "content": "\ud83d\udd25 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 FortiClient EMS: CVE-2026-21643 \ud83d\udd34 CVSS 9.8\n\n\u0412 Fortinet FortiClient Endpoint Management Server (EMS) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438! \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f (CWE-89) \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u0430 (tenant). HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432 SQL-\u0437\u0430\u043f\u0440\u043e\u0441 \u043a PostgreSQL \u0431\u0435\u0437 \u043e\u0447\u0438\u0441\u0442\u043a\u0438. \u0421\u0430\u043c\u043e\u0435 \u0441\u0442\u0440\u0430\u0448\u043d\u043e\u0435 \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0414\u041e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438!\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442: \u041c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u043e\u0434\u0438\u043d HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a:\n\u2014 \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432\n\u2014 \u0438\u043d\u0432\u0435\u043d\u0442\u0430\u0440\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u043e\u0432\n\u2014 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\u2014 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shodan, \u043e\u043a\u043e\u043b\u043e 1000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0442\u043e\u0440\u0447\u0430\u0442 \u0433\u043e\u043b\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u043a\u043e\u0439 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \ud83e\udd2f\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n1\ufe0f\u20e3 \u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c FortiClient EMS 7.4.4 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.4.5 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435. \u0412\u0435\u0440\u0441\u0438\u0438 7.2 \u0438 8.0 \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n2\ufe0f\u20e3 \u0423\u0431\u0440\u0430\u0442\u044c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 EMS \u0438\u0437 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0422\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 VPN!\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n\ud83d\udc8e \u042d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0440\u0430\u043d\u044c\u0448\u0435 \u0432\u0441\u0435\u0445 \u2014 VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: https://vip.eh.su \ud83d\ude80\n\n#Fortinet #CVE #SQLi #ZeroDay #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-20T00:00:25.455946Z"}, {"uuid": "92083a03-64b8-4622-aba7-23c1ee898fa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/critical_bug/1682", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-21643: SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 Fortinet FortiClient EMS", "creation_timestamp": "2026-07-20T00:00:25.484545Z"}, {"uuid": "63a56605-b8f9-40cd-b1f4-372871ab3e0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "https://t.me/critical_bug/1681", "content": "\ud83d\udd25 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 FortiClient EMS: CVE-2026-21643 \ud83d\udd34 CVSS 9.8\n\n\u0412 Fortinet FortiClient Endpoint Management Server (EMS) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438! \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f (CWE-89) \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u0430 (tenant). HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432 SQL-\u0437\u0430\u043f\u0440\u043e\u0441 \u043a PostgreSQL \u0431\u0435\u0437 \u043e\u0447\u0438\u0441\u0442\u043a\u0438. \u0421\u0430\u043c\u043e\u0435 \u0441\u0442\u0440\u0430\u0448\u043d\u043e\u0435 \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0414\u041e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438!\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442: \u041c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u043e\u0434\u0438\u043d HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a:\n\u2014 \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432\n\u2014 \u0438\u043d\u0432\u0435\u043d\u0442\u0430\u0440\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u043e\u0432\n\u2014 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\u2014 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shodan, \u043e\u043a\u043e\u043b\u043e 1000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0442\u043e\u0440\u0447\u0430\u0442 \u0433\u043e\u043b\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u043a\u043e\u0439 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \ud83e\udd2f\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n1\ufe0f\u20e3 \u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c FortiClient EMS 7.4.4 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.4.5 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435. \u0412\u0435\u0440\u0441\u0438\u0438 7.2 \u0438 8.0 \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n2\ufe0f\u20e3 \u0423\u0431\u0440\u0430\u0442\u044c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 EMS \u0438\u0437 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0422\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 VPN!\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n\ud83d\udc8e \u042d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0440\u0430\u043d\u044c\u0448\u0435 \u0432\u0441\u0435\u0445 \u2014 VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: https://vip.eh.su \ud83d\ude80\n\n#Fortinet #CVE #SQLi #ZeroDay #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-21T00:00:40.735282Z"}, {"uuid": "7a3b8872-2e66-405f-8d00-a4ad5aec3052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/critical_bug/1680", "content": "\ud83d\udc31 \u042f \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445. \u042f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u042f \u0432\u0435\u0437\u0434\u0435... (\u044d\u0442\u043e \u043d\u0435 \u044f, \u044d\u0442\u043e CVE-2026-21643)", "creation_timestamp": "2026-07-21T00:00:40.780111Z"}, {"uuid": "e9aa1b91-ea1b-4547-8126-d94bd436fb8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "https://t.me/infosec_ita_notizie/2567", "content": "\ud83d\uddde\ufe0f Critical Fortinet FortiClient EMS Vulnerability CVE-2026-21643 Actively Exploited \u2014 CISA Demands Patch Today\n\n\ud83c\udfe1 via securebulletin.com \ud83d\udd17 https://ift.tt/Df4w3WH", "creation_timestamp": "2026-07-21T04:00:07.926222Z"}, {"uuid": "d085c66e-9cf5-4bb9-8ddc-6d1c43113000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/cve0day/318", "content": "CVE-2026-21643\n\nAn improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.\n\nGitHub Link:\nhttps://github.com/alirezac0/CVE-2026-21643", "creation_timestamp": "2026-08-27T15:00:11.477167Z"}, {"uuid": "bef0c0d2-097c-46b1-89fe-90f08dca004d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "https://t.me/infosec_ita_notizie/2567", "content": "\ud83d\uddde\ufe0f Critical Fortinet FortiClient EMS Vulnerability CVE-2026-21643 Actively Exploited \u2014 CISA Demands Patch Today\n\n\ud83c\udfe1 via securebulletin.com \ud83d\udd17 https://ift.tt/Df4w3WH", "creation_timestamp": "2026-07-22T00:00:31.730070Z"}, {"uuid": "b3b7ffae-72f2-4d13-9ebe-d997af2a7e8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-22)", "content": "", "creation_timestamp": "2026-08-23T10:15:12.939052Z"}, {"uuid": "9caed870-4b3b-44b9-9e16-8aa2b26eeb46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/cyberwarehouse/1069", "content": "\ud83d\udea8\ud83d\udee1\ufe0f Fortinet Fixes Critical FortiClientEMS RCE (CVE-2026-21643, CVSS 9.1).\n\nSQL injection flaw enables unauthenticated remote command execution via crafted requests. Affects EMS 7.4.4 (patch available).\n\nSeparate FortiCloud SSO bug is actively exploited for admin persistence and firewall config theft.\n\n\ud83d\udd17 See affected versions and patch guidance \u2192 https://thehackernews.com/2026/02/fortinet-patches-critical-sqli-flaw.html", "creation_timestamp": "2026-07-26T02:00:06.538543Z"}, {"uuid": "e01b86b6-4e43-4f3b-8daf-9eeeac43fcea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/cyberwarehouse/1069", "content": "\ud83d\udea8\ud83d\udee1\ufe0f Fortinet Fixes Critical FortiClientEMS RCE (CVE-2026-21643, CVSS 9.1).\n\nSQL injection flaw enables unauthenticated remote command execution via crafted requests. Affects EMS 7.4.4 (patch available).\n\nSeparate FortiCloud SSO bug is actively exploited for admin persistence and firewall config theft.\n\n\ud83d\udd17 See affected versions and patch guidance \u2192 https://thehackernews.com/2026/02/fortinet-patches-critical-sqli-flaw.html", "creation_timestamp": "2026-07-27T00:00:34.287437Z"}, {"uuid": "a9f1f627-015b-458b-9d4a-e37224d15cff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/318", "content": "CVE-2026-21643\n\nAn improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.\n\nGitHub Link:\nhttps://github.com/alirezac0/CVE-2026-21643", "creation_timestamp": "2026-08-29T00:00:31.312929Z"}, {"uuid": "3b88529e-1808-497a-97e1-a090351a05ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-23)", "content": "", "creation_timestamp": "2026-08-24T10:00:07.868152Z"}, {"uuid": "94b272df-2d15-4833-b2eb-0dc22a496033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-23)", "content": "", "creation_timestamp": "2026-08-24T10:15:34.756577Z"}, {"uuid": "518a82d9-32f8-4bfc-a0d6-44c48e71ad49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/CyberDispatch/736", "content": "Fortinet Fixes Critical FortiClientEMS RCE (CVE-2026-21643, CVSS 9.1).\n\nSQL injection flaw enables unauthenticated remote command execution via crafted requests. Affects EMS 7.4.4 (patch available).\n\nSeparate FortiCloud SSO bug is actively exploited for admin persistence and firewall config theft.", "creation_timestamp": "2026-08-30T00:00:47.290822Z"}, {"uuid": "f2d23e11-9961-4582-9813-c480ed7ff9aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-29)", "content": "", "creation_timestamp": "2026-08-30T10:00:07.142701Z"}, {"uuid": "3cef03fc-7820-41e6-a779-0cfe317f9ea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/CyberDispatch/689", "content": "Fortinet Fixes Critical FortiClientEMS RCE (CVE-2026-21643, CVSS 9.1).\n\nSQL injection flaw enables unauthenticated remote command execution via crafted requests. Affects EMS 7.4.4 (patch available).\n\nSeparate FortiCloud SSO bug is actively exploited for admin persistence and firewall config theft.", "creation_timestamp": "2026-08-31T00:00:12.512376Z"}, {"uuid": "c492ac03-3309-4139-b18d-17bca5e5170d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/CyberDispatch/736", "content": "Fortinet Fixes Critical FortiClientEMS RCE (CVE-2026-21643, CVSS 9.1).\n\nSQL injection flaw enables unauthenticated remote command execution via crafted requests. Affects EMS 7.4.4 (patch available).\n\nSeparate FortiCloud SSO bug is actively exploited for admin persistence and firewall config theft.", "creation_timestamp": "2026-08-31T00:00:13.438699Z"}, {"uuid": "5950c1c2-70f4-4150-9c3e-17055348bdd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/cissp/7861", "content": "#AppSec\n#InfosecStandards\nOWASP Application Security Verification Standard\nVersion 5.0.0, 2025.\n\nPlus also\nFortinet Fixes Critical FortiClientEMS RCE (CVE-2026-21643, CVSS 9.1).\n\nSQL injection flaw enables unauthenticated remote command execution via crafted requests. Affects EMS 7.4.4 (patch available). Separate FortiCloud SSO bug is actively exploited for admin persistence and firewall config theft.\nSee affected versions and patch guidance \u2192 \nhttps://thehackernews.com/2026/02/fortinet-patches-critical-sqli-flaw.html\n\n\u2014 CISO as a Service \u2014\n| Strategic Cyber Defense & GRC\nResilient Through Knowledge\n2026.02.23\n\nhttps://www.linkedin.com/posts/alirezaghahrood_owasp-asvs-2025-activity-7431554057246265344-Ly7z", "creation_timestamp": "2026-09-01T17:00:12.819562Z"}, {"uuid": "2b96ce42-322e-4d82-a0e9-90b989c0a252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21641", "type": "seen", "source": "https://t.me/hacking_Attack/178244", "content": "How I Found My First CVE (CVE-2026\u201321641)\nhttps://medium.com/@0xJad/how-i-found-my-first-cve-cve-2026-21641-7f29af74fc84?source=rss------bug_bounty-5\n\nCVE-2026\u201321641: Broken Access Control in Revive AdserverContinue reading on Medium \u00bb (https://medium.com/@0xJad/how-i-found-my-first-cve-cve-2026-21641-7f29af74fc84?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:13.847608Z"}, {"uuid": "27ff2e07-f7b8-417f-8872-81f9b6cadc3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21641", "type": "seen", "source": "https://t.me/hacking_Attack/178244", "content": "How I Found My First CVE (CVE-2026\u201321641)\nhttps://medium.com/@0xJad/how-i-found-my-first-cve-cve-2026-21641-7f29af74fc84?source=rss------bug_bounty-5\n\nCVE-2026\u201321641: Broken Access Control in Revive AdserverContinue reading on Medium \u00bb (https://medium.com/@0xJad/how-i-found-my-first-cve-cve-2026-21641-7f29af74fc84?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:31.954539Z"}, {"uuid": "df9d3d9b-283a-4de2-a054-705114c879a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/cissp/7861", "content": "#AppSec\n#InfosecStandards\nOWASP Application Security Verification Standard\nVersion 5.0.0, 2025.\n\nPlus also\nFortinet Fixes Critical FortiClientEMS RCE (CVE-2026-21643, CVSS 9.1).\n\nSQL injection flaw enables unauthenticated remote command execution via crafted requests. Affects EMS 7.4.4 (patch available). Separate FortiCloud SSO bug is actively exploited for admin persistence and firewall config theft.\nSee affected versions and patch guidance \u2192 \nhttps://thehackernews.com/2026/02/fortinet-patches-critical-sqli-flaw.html\n\n\u2014 CISO as a Service \u2014\n| Strategic Cyber Defense & GRC\nResilient Through Knowledge\n2026.02.23\n\nhttps://www.linkedin.com/posts/alirezaghahrood_owasp-asvs-2025-activity-7431554057246265344-Ly7z", "creation_timestamp": "2026-09-02T01:03:47.392389Z"}, {"uuid": "2c17289b-4b68-4a39-8f44-010422c912df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/45103", "content": "https://unaaldia.hispasec.com/2026/04/explotacion-activa-de-una-inyeccion-sql-critica-en-fortinet-forticlient-ems-cve-2026-21643.html?utm_source=rss&utm_medium=rss&utm_campaign=explotacion-activa-de-una-inyeccion-sql-critica-en-fortinet-forticlient-ems-cve-2026-21643", "creation_timestamp": "2026-09-02T06:00:15.137380Z"}, {"uuid": "e0508ff3-bdd8-4728-b4e5-0737dc73537b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/44226", "content": "\ud83d\udea8 Bug Bounty / Red Team Tip\n\nCVE-2026-21643 \u2014 Critical Pre-Auth SQL Injection (CVSS 9.1) in FortiClient EMS 7.4.4 (multi-tenant mode only)\n\nUnauthenticated attackers can inject arbitrary SQL via the Site HTTP header to the public endpoint /api/v1/init_consts (or login endpoint). This happens before authentication and hits the PostgreSQL backend with superuser-level access in many setups \u2192 full DB dump, schema extraction, or RCE (via PostgreSQL features like COPY FROM PROGRAM).\n\n- Affected: Only FortiClient EMS 7.4.4 (multi-tenant/Sites feature enabled)\n- Not affected: 7.2.x, 8.0.x, single-site deployments\n- Fixed: Upgrade to 7.4.5 or later\n- Status: Actively exploited in the wild + public PoCs available\n\nMain Detail Article (Highly Recommended):  \nBishop Fox deep-dive with exploitation paths, payloads (e.g., pg_sleep(5) for blind testing), and lab results \u2192  \nhttps://bishopfox.com/blog/cve-2026-21643-pre-authentication-sql-injection-in-forticlient-ems-7-4-4\n\nPublic PoC (GitHub):  \nhttps://github.com/0xBlackash/CVE-2026-21643\n\nUseful Google/Shodan Dorks:\n- http.title:\"FortiClient EMS\" \"7.4.4\"\n- http.html:\"FortiClient Enterprise Management Server\"\n- http.favicon.hash: -specific-hash (or search for EMS login page)\n- Shodan: \"Model: FCTEMS\" or \"FortiClient EMS\"\n\nQuick Check:\nIf your EMS login page is internet-facing and running 7.4.4 with multi-tenant enabled \u2192 patch ASAP or block public access. Thousands of instances are exposed (Shadowserver ~2k+, Shodan ~1k+).\n\nHigh-value target for hunters. Patch or restrict immediately!\n\n#BugBounty #RedTeam #Fortinet #CVE202621643 #SQLi", "creation_timestamp": "2026-09-02T06:00:15.666972Z"}, {"uuid": "41cfe20e-60c0-4f56-8a96-19ed0f740497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "exploited", "source": "https://t.me/HackingTeamGrupoOfficial/44226", "content": "\ud83d\udea8 Bug Bounty / Red Team Tip\n\nCVE-2026-21643 \u2014 Critical Pre-Auth SQL Injection (CVSS 9.1) in FortiClient EMS 7.4.4 (multi-tenant mode only)\n\nUnauthenticated attackers can inject arbitrary SQL via the Site HTTP header to the public endpoint /api/v1/init_consts (or login endpoint). This happens before authentication and hits the PostgreSQL backend with superuser-level access in many setups \u2192 full DB dump, schema extraction, or RCE (via PostgreSQL features like COPY FROM PROGRAM).\n\n- Affected: Only FortiClient EMS 7.4.4 (multi-tenant/Sites feature enabled)\n- Not affected: 7.2.x, 8.0.x, single-site deployments\n- Fixed: Upgrade to 7.4.5 or later\n- Status: Actively exploited in the wild + public PoCs available\n\nMain Detail Article (Highly Recommended):  \nBishop Fox deep-dive with exploitation paths, payloads (e.g., pg_sleep(5) for blind testing), and lab results \u2192  \nhttps://bishopfox.com/blog/cve-2026-21643-pre-authentication-sql-injection-in-forticlient-ems-7-4-4\n\nPublic PoC (GitHub):  \nhttps://github.com/0xBlackash/CVE-2026-21643\n\nUseful Google/Shodan Dorks:\n- http.title:\"FortiClient EMS\" \"7.4.4\"\n- http.html:\"FortiClient Enterprise Management Server\"\n- http.favicon.hash: -specific-hash (or search for EMS login page)\n- Shodan: \"Model: FCTEMS\" or \"FortiClient EMS\"\n\nQuick Check:\nIf your EMS login page is internet-facing and running 7.4.4 with multi-tenant enabled \u2192 patch ASAP or block public access. Thousands of instances are exposed (Shadowserver ~2k+, Shodan ~1k+).\n\nHigh-value target for hunters. Patch or restrict immediately!\n\n#BugBounty #RedTeam #Fortinet #CVE202621643 #SQLi", "creation_timestamp": "2026-09-03T00:00:47.103178Z"}, {"uuid": "d3aa1bbe-574c-4e67-bf87-ef24dcc21597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/45103", "content": "https://unaaldia.hispasec.com/2026/04/explotacion-activa-de-una-inyeccion-sql-critica-en-fortinet-forticlient-ems-cve-2026-21643.html?utm_source=rss&utm_medium=rss&utm_campaign=explotacion-activa-de-una-inyeccion-sql-critica-en-fortinet-forticlient-ems-cve-2026-21643", "creation_timestamp": "2026-09-03T00:00:47.488376Z"}, {"uuid": "a2768efb-3316-47f5-af21-3b1a936e86ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21641", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/178244", "content": "How I Found My First CVE (CVE-2026\u201321641)\nhttps://medium.com/@0xJad/how-i-found-my-first-cve-cve-2026-21641-7f29af74fc84?source=rss------bug_bounty-5\n\nCVE-2026\u201321641: Broken Access Control in Revive AdserverContinue reading on Medium \u00bb (https://medium.com/@0xJad/how-i-found-my-first-cve-cve-2026-21641-7f29af74fc84?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T01:00:03.933165Z"}, {"uuid": "43a9a3b0-db17-4b08-858f-e7bec04748aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21641", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/178244", "content": "How I Found My First CVE (CVE-2026\u201321641)\nhttps://medium.com/@0xJad/how-i-found-my-first-cve-cve-2026-21641-7f29af74fc84?source=rss------bug_bounty-5\n\nCVE-2026\u201321641: Broken Access Control in Revive AdserverContinue reading on Medium \u00bb (https://medium.com/@0xJad/how-i-found-my-first-cve-cve-2026-21641-7f29af74fc84?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:01:06.406892Z"}, {"uuid": "c7b56dff-720c-421e-bf89-10d4006f9529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21643", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-03)", "content": "", "creation_timestamp": "2026-09-04T10:00:14.986004Z"}]}