Exploit released for Fortinet RCE bug used in attacks, patch now

Security researchers disclosed a critical SQL injection vulnerability (CVE-2023-48788) in Fortinet FortiClient EMS (affected 7.0.1–7.0.10 and 7.2.0–7.2.2) that enables unauthenticated actors to achieve remote code execution with SYSTEM privileges; a PoC exploit was published and the vendor has since acknowledged active exploitation while hundreds of EMS instances remain exposed online.