CFADVISORY-CL-application-security-waf-waf-release-2026-04-15

Exploit Intelligence

• CVE-2026-20079 (github-poc-repo)
• CVE-2026-21643 (github-poc-repo)
• POC for CVE-2026-23869 (github-poc-repo)
• cybertechajju/CVE-2026-23869-Exploit (github-poc-repo)
• cybertechajju/CVE-2026-23869-Exploit (github-poc)
• POC for CVE-2026-23869 (github-poc)
• CVE-2026-21643 (github-poc)
• Python PoC and Nuclei template for CVE-2026-21643 (Pre-Authentication SQL Injection in FortiClient EMS 7.4.4) (github-poc)
• CVE-2026-20079 (github-poc)
• zh.ts (github-poc)

…and 52 more exploits

Timeline

• Apr 15, 2026 CVE Published

References

• WAF - WAF Release - 2026-04-15 advisory