CVE-2025-55717Disclosure(fortinet / fortimail)

LOWCVSS 4.0 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, FortiRecorder 7.2.0 through 7.2.3, FortiRecorder 7.0 all versions, FortiRecorder 6.4 all versions, FortiVoice 7.2.0, FortiVoice 7.0.0 through 7.0.6 may allow an authenticated malicious administrator to obtain user's secrets via CLI commands. Practical exploitability is limited by conditions out of the control of the attacker: An admin must log in to the targeted device.

fortinet CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://fortiguard.fortinet.com/psirt/FG-IR-26-080

Weakness type (CWE)

CWE-312

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

fortimail
fortirecorder
fortivoice

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-03-13); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

fortinet

Products

fortimailfortirecorderfortivoice

1 version affected across 3 products

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

CVE@CVEnew207d
Disclosure
CVE-2025-55717 A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail… https://www.cve.org/CVERecord?id=CVE-2025-55717
Post summary
The text presents a disclosure of CVE-2025-55717, describing a cleartext storage of sensitive information in specific Fortinet FortiMail versions, with no additional details on exploitation or mitigation.
00000193
56.7K followersView on X
DailyCVE@dailycve212d
Disclosure
🔵 Fortinet Multiple Products, Cleartext Storage of Sensitive Information, #CVE-2025-55717 (Low) https://dailycve.com/fortinet-multiple-products-cleartext-storage-of-sensitive-information-cve-2025-55717-low/
Post summary
The text references a Fortinet vulnerability (CVE-2025-55717) involving cleartext storage of sensitive information. No PoC, exploit, evidence of active misuse, or patch details are provided.
0000079
168 followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	fortinet	fortimail	-	-	-
App	fortinet	fortirecorder	-	-	-
App	fortinet	fortivoice	-	-	-
App	fortinet	fortivoice	7.2.0	-	-

Explore more

Back to dashboard fortinet CVEs fortimail vulnerabilities