CVE-2025-55717 Information disclosure in FortiMail

What is CVE-2025-55717?

CVE-2025-55717 is a low-severity vulnerability in Fortinet FortiMail, published on 10 Mar 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, FortiRecorder 7.2.0 through 7.2.3, FortiRecorder 7.0 all versions, FortiRecorder 6.4 all versions, FortiVoice 7.2.0, FortiVoice 7.0.0 through 7.0.6 may allow an authenticated malicious administrator to obtain user's secrets via CLI commands. Practical exploitability is limited by conditions out of the control of the attacker: An admin must log in to the targeted device.

Weakness: CWE-312

Which versions are affected by CVE-2025-55717?

It affects 3 products.

Products include Fortinet Fortimail, Fortinet Fortirecorder, Fortinet Fortivoice.

How do I fix CVE-2025-55717?

No fix has been published for CVE-2025-55717 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-55717 being exploited?

There is no known exploitation of CVE-2025-55717 in the wild and no public exploit code.

Other vulnerabilities in Fortinet FortiMail

• CVE-2026-104286 Fortinet FortiMail Path Traversal Exploited Critical 9.8
• CVE-2021-36166 Auth bypass in Fortinet FortiMail Critical 9.8
• CVE-2021-24007 SQL injection in Fortinet FortiMail Critical 9.8
• CVE-2020-9294 Auth bypass in FortiMail Critical 9.8
• CVE-2023-47539 Auth bypass in FortiMail Critical 9.0

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-2h2g-hg5x-83g2.