Cleartext Storage Vulnerability in Fortinet FortiMail, FortiRecorder, and FortiVoice Products
CVE-2025-55717

3.8LOW

Key Information:

Vendor

Fortinet
Status
Fortivoice
Fortimail
Fortirecorder
Vendor
CVE Published:
10 March 2026

What is CVE-2025-55717?

A vulnerability exists in various Fortinet products where sensitive information is stored in cleartext, allowing an authenticated malicious administrator to access user secrets through CLI commands. The risk is exacerbated by the fact that an attacker must first log in to the targeted device, limiting practical exploitability under certain conditions.

Affected Version(s)

FortiMail 7.6.0 <= 7.6.2

FortiMail 7.4.0 <= 7.4.4

FortiMail 7.2.0 <= 7.2.7

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-080

CVSS V3.1

Score:
3.8
Severity:
LOW
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.