CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago (Oct 29, 2026, 6:50 PM ET)

What this means for you

This week: 3,241 CVEs published, 235 critical, and 5 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stackFree account, 3 products This week's critical CVEs Exploited in the last 30 days

Published in the last 7 days: 3,241; Show in the list
Critical, last 7 days: 235; Show in the list
Healthcare-tagged, last 7 days: 5; Show in the list
Known exploited (CISA KEV): 1,762; Show in the list

Showing CVEs that name the product fortinet:forticlientems. Show all products

11 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2020-9287	High 7.5	A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable Assigned by fortinet	Mar 15, 2020
CVE-2023-45581	High 7.9	An improper privilege management vulnerability [CWE-269] vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.6 through 7.0.10, FortiClientEMS 7.0.0 through 7.0.4, FortiCl… Assigned by fortinet	Feb 15, 2024
CVE-2023-48788 Known exploited	Critical 9.3	A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to e… Assigned by fortinet	Mar 12, 2024
CVE-2023-47534	High 8.7	A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4 all versions, FortiCl… Assigned by fortinet	Mar 12, 2024
CVE-2024-21753	Medium 5.5	A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.4, FortiClientEMS 7.0 all versions, FortiClientEMS 6.4 all… Assigned by fortinet	Sep 10, 2024
CVE-2025-59922	Medium 6.8	An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.4, FortiClientEMS 7.4.0 throu… Assigned by fortinet	Jan 13, 2026
CVE-2026-21643 Known exploited	Critical 9.1	An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized co… Assigned by fortinet	Feb 6, 2026
CVE-2026-35616 Known exploited	Critical 9.1	A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests. Assigned by fortinet	Apr 3, 2026
CVE-2026-39809	Medium 6.2	A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5, FortiClientEMS 7.2.0 through 7.2.12, FortiClientEM… Assigned by fortinet	Apr 14, 2026
CVE-2026-39810	Medium 5.2	A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to information disclosure via decrypting database dump. Assigned by fortinet	Apr 14, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.