cve-2023-48788

CVE-2023-48788 is a critical SQL injection vulnerability in Fortinet's FortiClient Endpoint Management System (EMS) that is being actively exploited by attackers. This flaw allows unauthorized database access, potentially leading to data breaches or further compromise of managed endpoints. For Windows users, the risk is significant because FortiClient EMS is commonly used in enterprise environments to manage security policies on Windows endpoints. The vulnerability was patched by Fortinet, but unpatched systems remain exposed. Discussions on WindowsForum emphasize the urgency of applying the available security update to mitigate the threat. Administrators should verify their FortiClient EMS version and ensure the patch is deployed to prevent exploitation.