CVE-2025-54972

MediumCVSS 4.3

Published: 18/11/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

11th percentile - higher than 11% of all known CVEs

Summary

Fortinet FortiMail (7.6.0 through 7.6.3, 7.4.0 through 7.4.5, 7.2 all versions, 7.0 all versions) contains a CRLF injection vulnerability due to improper neutralization of CRLF sequences. An attacker can inject headers into the response by convincing a user to click a specially crafted link.

Risk Assessment

Potential HTTP header injection and response manipulation, which may lead to phishing or other attacks against users.

Recommendation

Update FortiMail to a version containing the vendor fix. Warn users about the risk of clicking suspicious links.

Other vulnerabilities in Fortinet FortiMail

CVE-2025-53681High
CVE-2025-53681 in Fortinet FortiMail (versions 7.6.0 to 7.6.3, 7.4.0 to 7.4.5, and 7.2.0 to 7.2.8) has an improper neutralization of special elements used in SQL commands, allowing an authenticated privileged attacker to execute unauthorized code or commands via specially crafted HTTP or HTTPS requests.

Original NVD description (English source)

An improper neutralization of crlf sequences ('crlf injection') vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2 all versions, FortiMail 7.0 all versions may allow an attacker to inject headers in the response via convincing a user to click on a specifically crafted link

Vulnerability data from NVD (NIST) · CISA KEV · EPSS