← Back to CVE List
Vulnerability Intelligence Report
Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability

CVE-2025-32756

A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.7, FortiNDR 7.2.0 through 7.2.4, FortiNDR 7.0.0 through 7.0.6, FortiRecorder 7.2.0 through 7.2.3, FortiRecorder 7.0.0 through 7.0.5, FortiRecorder 6.4.0 through 6.4.5, FortiVoice 7.2.0, FortiVoice 7.0.0 through 7.0.6, FortiVoice 6.4.0 through 6.4.10 allows a remote unauthenticated attacker to execute arbitrary code or commands via sending HTTP requests with specially crafted hash cookie.

CISA KEV SSVC: Active Exploitation Automatable
CVSS Base Score
9.6
CRITICAL
Exploitability:3.9
Impact Score:5.9
EPSS Probability:31.42%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
Authentication
Weaponization
SSVC Action

Weaknesses (CWE)

CWE-121 ↗Execute unauthorized code or commands

Affected Products & Versions

Vendor Product Affected Versions
Fortinet FortiNDR 7.6.0 (affected), 7.4.0 <= 7.4.7 (affected), 7.2.0 <= 7.2.4 (affected), 7.1.0 <= 7.1.1 (affected), 7.0.0 <= 7.0.6 (affected), 1.5.0 <= 1.5.3 (affected), 1.4.0 (affected), 1.3.0 <= 1.3.1 (affected), 1.2.0 (affected), 1.1.0 (affected)
Fortinet FortiCamera 2.1.0 <= 2.1.3 (affected), 2.0.0 (affected), 1.1.0 <= 1.1.5 (affected)
Fortinet FortiRecorder 7.2.0 <= 7.2.3 (affected), 7.0.0 <= 7.0.5 (affected), 6.4.0 <= 6.4.5 (affected)
Fortinet FortiVoice 7.2.0 (affected), 7.0.0 <= 7.0.6 (affected), 6.4.0 <= 6.4.10 (affected)
Fortinet FortiMail 7.6.0 <= 7.6.2 (affected), 7.4.0 <= 7.4.4 (affected), 7.2.0 <= 7.2.7 (affected), 7.0.0 <= 7.0.8 (affected)

References & Technical Advisories

No reference links found.

Threat Intelligence Signals

CISA KEV
ACTIVE IN CATALOG
EPSS Score
31.419%

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityFortinet, Inc. · Vendor · USA
Reserved2025-04-10T08:12:12
Published2025-05-13T14:46:44
Last Updated2026-02-26T18:28:36

LINK COPIED TO CLIPBOARD