FORTINET WARNS OF CRITICAL RCE IN ENDPOINT MANAGEMENT SOFTWARE

Summary from the TLDR InfoSec newsletter

Fortinet has a critical vulnerability in its FortiClient EMS that enables remote code execution. The SQL injection vulnerability enables unauthenticated attackers to execute arbitrary commands. Horizon3 said that it will release a technical deep dive and proof-of-concept exploit code next week.