CVE-2025-53681

HighCVSS 7.2

Published: 12/05/2026(UTC)Updated: 07/10/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

28th percentile - higher than 28% of all known CVEs

Summary

CVE-2025-53681 in Fortinet FortiMail (versions 7.6.0 to 7.6.3, 7.4.0 to 7.4.5, and 7.2.0 to 7.2.8) has an improper neutralization of special elements used in SQL commands, allowing an authenticated privileged attacker to execute unauthorized code or commands via specially crafted HTTP or HTTPS requests.

Risk Assessment

An attacker with the appropriate privileges can exploit this vulnerability to gain control over the system, posing a serious threat to the organization's data security.

Recommendation

It is recommended to update FortiMail to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.

Other vulnerabilities in Fortinet FortiMail

CVE-2025-54972Medium
Fortinet FortiMail (7.6.0 through 7.6.3, 7.4.0 through 7.4.5, 7.2 all versions, 7.0 all versions) contains a CRLF injection vulnerability due to improper neutralization of CRLF sequences. An attacker can inject headers into the response by convincing a user to click a specially crafted link.

Original NVD description (English source)

An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2.0 through 7.2.8 allows an authenticated privileged attacker to execute unauthorized code or commands via specifically crafted HTTP or HTTPS requests.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS