Paper/Archive/CVE-2025-32756

CVE-2025-32756

Fortinet FortiNDR — Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability

KEV · due 4 Jun EPSS 31%public exploit SSVC act CVSS 9.6

CVSS 9.6 (CNA)9.6 / 10 × 3028.8 In CISA KEV+3030.0 EPSS percentile 98.3.983 × 2019.7 Exploit: SSVC active+1010.0 SSVC exploitation: active+1010.0

Description · from the CVE record

A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.7, FortiNDR 7.2.0 through 7.2.4, FortiNDR 7.0.0 through 7.0.6, FortiRecorder 7.2.0 through 7.2.3, FortiRecorder 7.0.0 through 7.0.5, FortiRecorder 6.4.0 through 6.4.5, FortiVoice 7.2.0, FortiVoice 7.0.0 through 7.0.6, FortiVoice 6.4.0 through 6.4.10 allows a remote unauthenticated attacker to execute arbitrary code or commands via sending HTTP requests with specially crafted hash cookie.

Affected

ProductAffectedFixed inSource

FortiNDR7.6.0–CNA

FortiNDR7.4.0 – 7.4.7–CNA

FortiNDR7.2.0 – 7.2.4–CNA

FortiNDR7.1.0 – 7.1.1–CNA

FortiNDR7.0.0 – 7.0.6–CNA

FortiNDR1.5.0 – 1.5.3–CNA

FortiNDR1.4.0–CNA

FortiNDR1.3.0 – 1.3.1–CNA

FortiNDR1.2.0–CNA

FortiNDR1.1.0–CNA

FortiCamera2.1.0 – 2.1.3–CNA

FortiCamera2.0.0–CNA

Scores by source

fortinet (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C

CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

reffortiguard.fortinet.com/psirt/FG-IR-25-254 refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-32756 kevcisa.gov/known-exploited-vulnerabilities-catalog