critical
CISA KEV
Ransomware
CVE-2023-48788
Fortinet FortiClient EMS SQL Injection Vulnerability
Description
Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Federal remediation due Apr 15, 2024 — past due
Advertisement
Coverage
- Lynx Ransomware Linked to Massive FortiBleed Credential Theft
Jul 2, 2026
- CVE-2023-48788: Critical FortiClient EMS RCE Under Active Exploitation
May 28, 2026
- FortiClient EMS RCE via CVE-2023-48788 — Patch Guidance
Apr 6, 2026
- CVE-2023-48788: FortiClient EMS RCE via SQL Injection Exploit
Mar 30, 2026