https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:02:10.334368+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-00507 bdu:2026-00507 2026-10-03T22:02:10.408884+00:00 bdu:2026-00507 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0035 certfr-2026-avi-0035 — De multiples vulnérabilités ont été découvertes dans les produits Fortinet. Certaines d'entre elles permettent à un att… 2026-10-03T22:02:10.408922+00:00 certfr-2026-avi-0035 https://cve.radiocsirt.org/vuln/euvd-2026-265621 EUVD-2026-265621 2026-10-03T22:02:10.408942+00:00 EUVD-2026-265621 https://cve.radiocsirt.org/vuln/fkie_cve-2025-59922 fkie_cve-2025-59922 2026-10-03T22:02:10.408953+00:00

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.4, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2.0 through 7.2.10, FortiClientEMS 7.0 all versions may allow an authenticated attacker with at least read-only admin permission to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.

 https://cve.radiocsirt.org/vuln/ghsa-229q-96qr-8qq9 GHSA-229q-96qr-8qq9 2026-10-03T22:02:10.408984+00:00

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.4, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2.0 through 7.2.10, FortiClientEMS 7.0 all versions may allow an authenticated attacker with at least read-only admin permission to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0084 WID-SEC-W-2026-0084 — Fortinet FortiClient: Schwachstelle ermöglicht SQL-Injection 2026-10-03T22:02:10.409002+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Fortinet FortiClient ausnutzen, um einen SQL-Injection Angriff durchzuführen.