Advisory Engine

← Home

SQL command injection in administrative portal

Source: fortinet / FG-IR-26-132 — original advisory

Published: 2026-05-12 · Last updated: 2026-05-12 · Vendor severity: Not rated by vendor

CVEs

CVECVSSCWEExploitation
CVE-2025-53681 6.3 CWE-89: SQL Injection Not observed in the wild

Affected Products

ProductAffected versionsFixed version
FortiMail FortiMail 7.2 Not specified by vendor
FortiMail FortiMail 7.4 Not specified by vendor
FortiMail FortiMail 7.6 Not specified by vendor