CVE-2026-21643: CYBER THREAT ASSESSMENT: FORTINET FORTICLIENT EMS INFRASTRUCTURE Unauthenticate

CYBER THREAT ASSESSMENT: FORTINET FORTICLIENT EMS INFRASTRUCTURE Unauthenticated SQL injection vector identified in Fortinet FortiClient EMS deployments via CVE-2026-21643, permitting remote code execution through malformed HTTP request payloads. Attack surface encompasses all internet-exposed instances lacking compensating controls, as no authentication requirement exists at exploitation point. Affected versions have not been patched as of reporting date. Immediate inventory of FortiClient EMS installations and network segmentation review recommended for defense posture assessment.