CVEvulnerability

CVE-2025-32756

9.8 CRITICAL Known exploited Published 2025-05-13 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability — Fortinet Multiple Products

Fortinet FortiFone, FortiVoice, FortiNDR and FortiMail contain a stack-based overflow vulnerability that may allow a remote unauthenticated attacker to execute arbitrary code or commands via crafted HTTP requests.

Added to KEV: 2025-05-14
Remediation due: 2025-06-04
Ransomware use: Unknown
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Notes: https://fortiguard.fortinet.com/psirt/FG-IR-25-254 ; https://nvd.nist.gov/vuln/detail/CVE-2025-32756

Status: Analyzed
Published: 2025-05-13
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected]): 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-121, CWE-787

Description

A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.7, FortiNDR 7.2.0 through 7.2.4, FortiNDR 7.0.0 through 7.0.6, FortiRecorder 7.2.0 through 7.2.3, FortiRecorder 7.0.0 through 7.0.5, FortiRecorder 6.4.0 through 6.4.5, FortiVoice 7.2.0, FortiVoice 7.0.0 through 7.0.6, FortiVoice 6.4.0 through 6.4.10 allows a remote unauthenticated attacker to execute arbitrary code or commands via sending HTTP requests with specially crafted hash cookie.

Affected configurations

• fortinet fortimail (>= 7.0.0 < 7.0.9) • fortinet fortimail (>= 7.2.0 < 7.2.8) • fortinet fortimail (>= 7.4.0 < 7.4.5) • fortinet fortimail (>= 7.6.0 < 7.6.3) • fortinet fortindr (>= 7.0.0 < 7.0.7) • fortinet fortindr (>= 7.2.0 < 7.2.5) • fortinet fortindr (>= 7.4.0 < 7.4.8) • fortinet fortindr 1.1.0 • fortinet fortindr 1.2.0 • fortinet fortindr 1.3.0 • fortinet fortindr 1.4.0 • fortinet fortindr 1.5.0 • fortinet fortindr 7.1.0 • fortinet fortindr 7.1.1 • fortinet fortindr 7.6.0 • fortinet fortirecorder (>= 6.4.0 < 6.4.6) • fortinet fortirecorder (>= 7.0.0 < 7.0.6) • fortinet fortirecorder (>= 7.2.0 < 7.2.4) • fortinet fortivoice (>= 6.4.0 < 6.4.11) • fortinet fortivoice (>= 7.0.0 < 7.0.7) • fortinet fortivoice 7.2.0 • fortinet forticamera firmware (>= 2.0.0 <= 2.1.3) • fortinet forticamera firmware (>= 1.1.0 <= 1.1.5)

Weakness · CWE (2)

CWE-121 Stack-based Buffer Overflow weakness
CWE-787 Out-of-bounds Write weakness

References