critical
CISA KEV
Ransomware
CVE-2023-48788
Fortinet FortiClient EMS SQL Injection Vulnerability
// Description
Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests.
// Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Federal remediation due Apr 15, 2024 — past due
Advertisement
// Coverage
- Lynx Ransomware Linked to Massive FortiBleed Credential Theft
Jul 2, 2026
- CVE-2023-48788: Critical FortiClient EMS RCE Under Active Exploitation
May 28, 2026
- FortiClient EMS RCE via CVE-2023-48788 — Patch Guidance
Apr 6, 2026
- CVE-2023-48788: FortiClient EMS RCE via SQL Injection Exploit
Mar 30, 2026