← Back to browse · API

CVE-2025-32756

Severity
CRITICAL
CVSS
9.6
EPSS
0.3255
Risk score
74.79
CISA KEV
Yes
PoC
No
Published
2025-05-13
Modified
2026-02-26
First seen
2026-08-07
Aliases
EUVD-2025-14705, GHSA-FCPX-H44G-VX2X
Products
Fortinet:FortiCamera 1.1.0 ≤1.1.5, Fortinet:FortiCamera 2.0.0, Fortinet:FortiCamera 2.1.0 ≤2.1.3, Fortinet:FortiMail 7.0.0 ≤7.0.8, Fortinet:FortiMail 7.2.0 ≤7.2.7, Fortinet:FortiMail 7.4.0 ≤7.4.4, Fortinet:FortiMail 7.6.0 ≤7.6.2, Fortinet:FortiNDR 1.1.0, Fortinet:FortiNDR 1.2.0, Fortinet:FortiNDR 1.3.0 ≤1.3.1, Fortinet:FortiNDR 1.4.0, Fortinet:FortiNDR 1.5.0 ≤1.5.3, Fortinet:FortiNDR 7.0.0 ≤7.0.6, Fortinet:FortiNDR 7.1.0 ≤7.1.1, Fortinet:FortiNDR 7.2.0 ≤7.2.4, Fortinet:FortiNDR 7.4.0 ≤7.4.7, Fortinet:FortiNDR 7.6.0, Fortinet:FortiRecorder 6.4.0 ≤6.4.5, Fortinet:FortiRecorder 7.0.0 ≤7.0.5, Fortinet:FortiRecorder 7.2.0 ≤7.2.3, Fortinet:FortiVoice 6.4.0 ≤6.4.10, Fortinet:FortiVoice 7.0.0 ≤7.0.6, Fortinet:FortiVoice 7.2.0, Fortinet:Multiple Products
Sources
euvd EUVD-2025-14705
cisa.gov CVE-2025-32756

Description

A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.7, FortiNDR 7.2.0 through 7.2.4, FortiNDR 7.0.0 through 7.0.6, FortiRecorder 7.2.0 through 7.2.3, FortiRecorder 7.0.0 through 7.0.5, FortiRecorder 6.4.0 through 6.4.5, FortiVoice 7.2.0, FortiVoice 7.0.0 through 7.0.6, FortiVoice 6.4.0 through 6.4.10 allows a remote unauthenticated attacker to execute arbitrary code or commands via sending HTTP requests with specially crafted hash cookie.

References