CVE-2025-32756 Fortinet Multiple Products
Fortinet FortiFone, FortiVoice, FortiNDR and FortiMail contain a stack-based overflow vulnerability that may allow a remote unauthenticated attacker to execute arbitrary code or commands via crafted HTTP requests.
- CVSS
- not scored
On CISA’s exploited list
Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
- Added
- 2025-05-14
- Federal patch deadline
- 2025-06-04
- Ransomware use
- not known