CVE-2026-21643

Overview

Fortinet
FortiClientEMS

06 Feb 2026

Published

10 Feb 2026

Updated

CVSS v3.1

CRITICAL (9.1)

EPSS

0.13%

MITRE

KEV

Description

An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.

Statistics

9 Posts

Last activity: 1 hour ago

Fediverse

TechNadu @technadu

Fortinet’s CVE-2026-21643 highlights a persistent issue: management and control-plane components remain prime attack surfaces.

SQL injection leading to unauthenticated code execution reinforces the need for rapid patch cycles, continuous monitoring, and segmentation of security tooling.

Source: https://thehackernews.com/2026/02/fortinet-patches-critical-sqli-flaw.html

💬 How are you reducing blast radius for management infrastructure?

🔔 Follow @technadu for threat-focused security coverage

#Infosec #Fortinet #VulnerabilityResearch #SQLInjection #ZeroTrust #CyberDefense #TechNadu

0
0
0
1h ago

Bluesky

Information Security Briefly @infosecbriefly.bsky.social

Critical SQL injection in FortiClientEMS (CVE-2026-21643, CVSS 9.1) allows unauthenticated attackers to execute arbitrary code; affected versions require immediate upgrade.

0
0
0
13h ago

Eyal Estrin ☁️ @eyalestrin.bsky.social

Fortinet Patches Critical SQLi Flaw Enabling Unauthenticated Code Execution (CVE-2026-21643) #patchmanagement

0
0
0
10h ago

Calimeg @calimegai.bsky.social

#Fortinet corrige une faille SQLi critique (CVE-2026-21643, CVSS 9.1) dans #FortiClientEMS, risquant l'exécution de code sans authentification. Mettez à jour vite ! ⚠️ #CyberSecurity #Automatisation

0
0
0
8h ago

PCI Guru @jbhall56.bsky.social

The vulnerability, tracked as CVE-2026-21643, has a CVSS rating of 9.1 out of a maximum of 10.0. thehackernews.com/2026/02/fort...

0
0
1
7h ago

Undercode Testing @undercode.bsky.social

Fortinet’s Nightmare: How a Single SQL Injection Flaw (CVE-2026-21643) Can Let Hackers Hijack Your Entire Enterprise Security + Video Introduction: The discovery of CVE-2026-21643, a critical SQL Injection (SQLi) vulnerability in FortiClient Endpoint Management Server (EMS), sends a stark reminder…

0
0
1
7h ago

OpsMatters @opsmatters.com

The latest update for #ArcticWolf includes "CVE-2026-1731: Unauthenticated OS Command Injection Vulnerability in BeyondTrust Remote Support and Privileged Remote Access" and "CVE-2026-21643: Critical SQL Injection in FortiClientEMS". #cybersecurity #infosec #networks https://opsmtrs.com/2ZFbaTl

0
0
0
15h ago

CVE-2026-1731

Overview

BeyondTrust
Remote Support(RS) & Privileged Remote Access(PRA)

06 Feb 2026

Published

10 Feb 2026

Updated

CVSS v4.0

CRITICAL (9.9)

EPSS

0.44%

MITRE

KEV

Description

BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the context of the site user.

Statistics

6 Posts
5 Interactions

Last activity: 2 hours ago

Fediverse

Dark Web Informer :verified_paw: @DarkWebInformer

‼️ Critical Pre-Auth RCE Vulnerability in BeyondTrust Remote Support & PRA Exposes Thousands of Instances (CVE-2026-1731)

https://darkwebinformer.com/critical-pre-auth-rce-vulnerability-in-beyondtrust-remote-support-pra-allegedly-exposes-thousands-of-instances-cve-2026-1731/

2
1
0
2h ago

Bluesky

Stephen Fewer @stephenfewer.bsky.social

We just published our @rapid7.com analysis of CVE-2026-1731, a critical command injection affecting BeyondTrust Privileged Remote Access (PRA) & Remote Support (RS). Unauthenticated RCE, with a root cause due to Bash arithmetic evaluation. Analysis/PoC here: attackerkb.com/topics/jNMBc...

1
1
0
4h ago

キタきつね @kitafox.bsky.social

BeyondTrust は、リモートアクセスツールにおける簡単に悪用される認証前 RCE 脆弱性 (CVE-2026-1731) を修正しました BeyondTrust fixes easy-to-exploit pre-auth RCE vulnerability in remote access tools (CVE-2026-1731) #HelpNetSecurity (Feb 9) www.helpnetsecurity.com/2026/02/09/b...

0
0
0
19h ago

Undercode Testing @undercode.bsky.social

Operation MidnightPatch: The CVE-2026-1731 BeyondTrust Bomgar Crisis and the Coming Wave of Mass Exploitation + Video Introduction: A critical pre-authentication remote code execution (RCE) flaw, designated CVE-2026-1731, has been uncovered in BeyondTrust Remote Support (formerly Bomgar), a…

0
0
0
15h ago

Information Security Briefly @infosecbriefly.bsky.social

Critical unauthenticated RCE (CVE-2026-1731, CVSS 9.9) affects BeyondTrust RS and PRA; patches are available and many internet-accessible on-prem deployments are likely exposed.

0
0
0
8h ago

OpsMatters @opsmatters.com

The latest update for #ArcticWolf includes "CVE-2026-1731: Unauthenticated OS Command Injection Vulnerability in BeyondTrust Remote Support and Privileged Remote Access" and "CVE-2026-21643: Critical SQL Injection in FortiClientEMS". #cybersecurity #infosec #networks https://opsmtrs.com/2ZFbaTl

0
0
0
15h ago

CVE-2026-1281

Overview

Ivanti
Endpoint Manager Mobile

29 Jan 2026

Published

30 Jan 2026

Updated

CVSS v3.1

CRITICAL (9.8)

EPSS

16.41%

MITRE

KEV

Description

A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

Statistics

3 Posts
12 Interactions

Last activity: Last hour

Fediverse

GreyNoise @greynoise

83% of observed Ivanti EPMM exploitation (CVE-2026-1281) traces to one bulletproof IP that isn't on any published IOC list. The IPs that are? VPN exits with zero Ivanti activity. We broke down who's actually doing this ⬇️ https://www.greynoise.io/blog/active-ivanti-exploitation

#Ivanti #ThreatIntel #CVE20261281 #InfoSec

3
2
0
Last hour

Bluesky

The Shadowserver Foundation @shadowserver.bsky.social

Massive increase in sources attempting Ivanti EPMM CVE-2026-1281 exploitation, with over 28.3K source IPs seen on 2026-02-09. IP data on attackers shared in our www.shadowserver.org/what-we-do/n... (with vulnerability_id set to CVE-2026-1281). 20.4K IPs seen from US networks.

3
3
0
1h ago

GreyNoise @greynoise.io

83% of observed Ivanti EPMM exploitation (CVE-2026-1281) traces to one bulletproof IP that isn't on any published IOC list. The IPs that are? VPN exits with zero Ivanti activity. We broke down who's actually doing this ⬇️ #Ivanti #ThreatIntel #CVE20261281 #InfoSec

0
1
0
Last hour

CVE-2026-0488

Overview

SAP_SE
SAP CRM and SAP S/4HANA (Scripting Editor)

10 Feb 2026

Published

10 Feb 2026

Updated

CVSS v3.1

CRITICAL (9.9)

EPSS

0.04%

MITRE

KEV

Description

An authenticated attacker in SAP CRM and SAP S/4HANA (Scripting Editor) could exploit a flaw in a generic function module call and execute unauthorized critical functionalities, which includes the ability to execute an arbitrary SQL statement. This leads to a full database compromise with high impact on confidentiality, integrity, and availability.

Statistics

3 Posts
6 Interactions

Last activity: 4 hours ago

Fediverse

circl @circl

An authenticated attacker in SAP CRM and SAP S/4HANA (Scripting Editor) could exploit a flaw in a generic function module call and execute unauthorized critical functionalities, which includes the ability to execute an arbitrary SQL statement. This leads to a full database compromise with high impact on confidentiality, integrity, and availability.

https://vulnerability.circl.lu/vuln/cve-2026-0488

#sap #vulnerability #cybersecurity #cve

CVE-2026-0488

3
1
0
10h ago

Offensive Sequence @offseq

🔥 CVE-2026-0488 (CVSS 9.9): CRITICAL auth bypass in SAP CRM & S/4HANA Scripting Editor. Authenticated users can run arbitrary SQL, risking full DB compromise. Patch fast, restrict access! https://radar.offseq.com/threat/cve-2026-0488-cwe-862-missing-authorization-in-sap-cae5a650 #OffSeq #SAP #Vuln #ERP #Cybersecurity

1
0
0
13h ago

Bluesky

Information Security Briefly @infosecbriefly.bsky.social

SAP released 27 security notes including two critical vulnerabilities (CVE-2026-0488 and CVE-2026-0509) enabling database compromise and unauthorized background remote function calls.

1
0
0
4h ago

CVE-2026-0509

Overview

SAP_SE
SAP NetWeaver Application Server ABAP and ABAP Platform

10 Feb 2026

Published

10 Feb 2026

Updated

CVSS v3.1

CRITICAL (9.6)

EPSS

0.04%

MITRE

KEV

Description

SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated, low-privileged user to perform background Remote Function Calls without the required S_RFC authorization in certain cases. This can result in a high impact on integrity and availability, and no impact on the confidentiality of the application.

Statistics

3 Posts
3 Interactions

Last activity: 4 hours ago

Fediverse

Offensive Sequence @offseq

🛡️ CRITICAL: CVE-2026-0509 in SAP NetWeaver ABAP (7.22 – 9.19) lets authenticated users run unauthorized background RFCs, risking integrity & availability. Patch when available, restrict S_RFC, monitor RFC usage. Details: https://radar.offseq.com/threat/cve-2026-0509-cwe-862-missing-authorization-in-sap-3bdb181d #OffSeq #SAP #CVE20260509 #infosec

2
0
0
15h ago

Uwe Fetzer @se38

3674774 - [CVE-2026-0509] Missing Authorization check in SAP NetWeaver Application Server #ABAP and ABAP Platform
https://me.sap.com/notes/3674774

0
0
0
9h ago

Bluesky

Information Security Briefly @infosecbriefly.bsky.social

SAP released 27 security notes including two critical vulnerabilities (CVE-2026-0488 and CVE-2026-0509) enabling database compromise and unauthorized background remote function calls.

1
0
0
4h ago

CVE-2026-1529

Overview

Red Hat
Red Hat build of Keycloak 26.2
rhbk/keycloak-operator-bundle

09 Feb 2026

Published

10 Feb 2026

Updated

CVSS

Pending

EPSS

0.02%

MITRE

KEV

Description

A flaw was found in Keycloak. An attacker can exploit this vulnerability by modifying the organization ID and target email within a legitimate invitation token's JSON Web Token (JWT) payload. This lack of cryptographic signature verification allows the attacker to successfully self-register into an unauthorized organization, leading to unauthorized access.

Statistics

2 Posts
3 Interactions

Last activity: 2 hours ago

Fediverse

buherator @buherator

#Keycloak CVE-2026-1529: "lack of cryptographic signature verification allows the attacker to successfully self-register into an unauthorized organization, leading to unauthorized access."

https://access.redhat.com/security/cve/cve-2026-1529

#JWT

3
0
0
2h ago

Bluesky

buherator @buherator.bsky.social

#Keycloak CVE-2026-1529: "lack of cryptographic signature verification allows the attacker to successfully self-register into an unauthorized organization, leading to unauthorized access." access.redhat.com -> #JWT Original->

0
0
0
2h ago

CVE-2026-25526

Overview

HubSpot
jinjava

04 Feb 2026

Published

05 Feb 2026

Updated

CVSS v3.1

CRITICAL (9.8)

EPSS

0.10%

MITRE

KEV

Description

JinJava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Prior to versions 2.7.6 and 2.8.3, JinJava is vulnerable to arbitrary Java execution via bypass through ForTag. This allows arbitrary Java class instantiation and file access bypassing built-in sandbox restrictions. This issue has been patched in versions 2.7.6 and 2.8.3.

Statistics

2 Posts

Last activity: 19 hours ago

Bluesky

CrowdCyber @crowdcyber.bsky.social

CVE-2026-25526: Critical Jinjava Flaw (CVSS 9.8) Permits Remote Code Execution

0
0
0
20h ago

キタきつね @kitafox.bsky.social

CVE-2026-25526: 重大な Jinjava の脆弱性 (CVSS 9.8) によりリモートコード実行が可能 CVE-2026-25526: Critical Jinjava Flaw (CVSS 9.8) Permits Remote Code Execution #DailyCyberSecurity (Feb 9) securityonline.info/cve-2026-255...

0
0
0
19h ago

CVE-2026-20817

Overview

Microsoft
Windows Server 2022

13 Jan 2026

Published

30 Jan 2026

Updated

CVSS v3.1

HIGH (7.8)

EPSS

0.06%

MITRE

KEV

Description

Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Statistics

2 Posts

Last activity: 7 hours ago

Fediverse

ekiledjian @edwardk

A newly documented Windows vulnerability, CVE-2026-20817, affects the Windows Error Reporting Service (WER), allowing local privilege escalation by enabling attackers to launch helper processes without proper authorization. Microsoft's mitigation involves disabling the vulnerable launch feature via a flag, and users are advised to patch promptly and monitor for suspicious process creation related to WerFault.exe or WerMgr.exe.
https://gbhackers.com/windows-error-reporting-flaw/

0
0
0
8h ago

Bluesky

Undercode Testing @undercode.bsky.social

CVE-2026-20817: The Hidden Windows Error Reporting Flaw That Grants Attackers Admin Keys + Video Introduction: A critical local privilege escalation (LPE) vulnerability has been discovered in the Windows Error Reporting (WER) service, a core component for crash reporting and diagnostics.…

0
0
0
7h ago

CVE-2023-49469

Overview

Pending

28 Dec 2023

Published

02 Aug 2024

Updated

CVSS

Pending

EPSS

0.16%

MITRE

KEV

Description

Reflected Cross Site Scripting (XSS) vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function.

Statistics

1 Post
10 Interactions

Last activity: 8 hours ago

Fediverse

Coco @coco

Hello !

Si vous utilisez #shaarli sous #debian, une vulnérabilité a été découverte et une mise à jour est disponible pour Trixie et Sid.

Bookworm reste vulnérable.

https://security-tracker.debian.org/tracker/CVE-2023-49469

7
3
0
8h ago

CVE-2015-10145

Overview

Gargoyle
Gargoyle Router Management Utility

31 Dec 2025

Published

02 Jan 2026

Updated

CVSS v4.0

HIGH (8.7)

EPSS

0.10%

MITRE

KEV

Description

Gargoyle router management utility versions 1.5.x contain an authenticated OS command execution vulnerability in /utility/run_commands.sh. The application fails to properly restrict or validate input supplied via the 'commands' parameter, allowing an authenticated attacker to execute arbitrary shell commands on the underlying system. Successful exploitation may result in full compromise of the device, including unauthorized access to system files and execution of attacker-controlled commands.

Statistics

1 Post
6 Interactions

Last activity: 5 hours ago

Fediverse

hrbrmstr 🇺🇦 🇬🇱 🇨🇦 @hrbrmstr

@todb Oh mighty CVE Seer! Pray expound upon which arcane spell doth cause a 2025 birthed vulnerability to don a CVE-2015 prefix?

CVE-2015-10145 — Published: 2025-12-31

1
5
0
5h ago