Hardcoded symmetric encryption key for Postgresql Fortinet PSIRT Advisories Fortinet PSIRT Contact: Website: https://fortiguard.fortinet.com/faq/psirt-contact FG-IR-26-107 Final 1 1 2026-04-14T00:00:00 Current version 2026-04-14T00:00:00 2026-04-14T00:00:00 A use of hard-coded cryptographic key vulnerability [CWE 321] in FortiClientEMS may allow an attacker in possession of an encrypted dump of the database to decrypt it. None Information disclosure None Internally discovered and reported by David Maciejak of Fortinet Product Security team. FortiClientEMS 7.4.5 FortiClientEMS 7.4.4 FortiClientEMS 7.4.3 FortiClientEMS 7.4.1 FortiClientEMS 7.4.0 CVE-2026-39810 FortiClientEMS-7.4.5 FortiClientEMS-7.4.4 FortiClientEMS-7.4.3 FortiClientEMS-7.4.1 FortiClientEMS-7.4.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C https://fortiguard.fortinet.com/psirt/FG-IR-26-107 Hardcoded symmetric encryption key for Postgresql Reference>