⚡ Exploit-DB.ai CRITICAL
CRITICAL

CVE-2023-48788

Published: March 18, 2026 · Source: National Vulnerability Database (NVD)

⚡ AI Threat Assessment

FortiClientEMS SQL injection enabling unauthenticated RCE — actively exploited against enterprise environments. Apply Fortinet patches immediately. Review all FortiClientEMS logs for exploitation indicators including suspicious darun.exe executions.

📋 Official Description

Fortinet FortiClientEMS SQL injection vulnerability in the DAS component allows unauthenticated attackers to execute arbitrary commands via crafted requests.

Get Real-Time CVE Alerts

Supernova subscribers receive AI-triaged CVE alerts the moment they're published — before the PoC drops.

Start Supernova — $99/mo →