{"id":"CVE-2025-57739","published":"2026-10-13T18:17:12.100","lastModified":"2026-10-15T12:10:00.230","description":"An improper neutralization of special elements used in an SQL Command (\"SQL Injection\") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2.0 through 7.2.8 allows an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP or HTTPS requests.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-89"],"vendors":[],"products":[],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-184","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Fortinet FortiMail suffers from SQL injection vulnerability that allows authenticated attackers to execute arbitrary commands on the system. This represents a critical security flaw since FortiMail handles sensitive email communications and can be used as a central mail server.","exploitability":"Exploitation requires an authenticated user account with access to HTTP/HTTPS interfaces, but is relatively straightforward once credentials are obtained.","blast_radius":"If exploited, this vulnerability could allow attackers to gain full control over the FortiMail server, potentially leading to email interception, data exfiltration, and lateral movement within the network.","remediation":"Upgrade to FortiMail 7.6.4 or later for the 7.6.x series, 7.4.6 or later for 7.4.x series, or 7.2.9 or later for 7.2.x series to remediate this SQL injection vulnerability.","detection":"Monitor for unusual database query patterns in application logs, particularly those involving user input parameters that may indicate SQL injection attempts.","tags":["sql-injection","email","web"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:49:58.117Z"}}