CVE-2026-21643

Fortinet hit by another exploited cybersecurity flaw

Yet another critical flaw in a Fortinet product has come to light as attackers continue to target the company, this time by actively exploiting a critical SQL injection vulnerability in the cybersecurity company’s management server. The vulnerability, ( CVE-2026-21643 ), allows unauthenticated threat actors to execute arbitrary code on unpatched systems via specifically-crafted HTTP requests. Thes