CVE-2025-32756

Assessment

Why it matters

CISA lists this vulnerability as known to be exploited; exploitation is confirmed; EPSS is 29.8%; technical severity is CVSS 9.8.

A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.7, FortiNDR 7.2.0 through 7.2.4, FortiNDR 7.0.0 through 7.0.6, FortiRecorder 7.2.0 through 7.2.3, FortiRecorder 7.0.0 through 7.0.5, FortiRecorder 6.4.0 through 6.4.5, FortiVoice 7.2.0, FortiVoice 7.0.0 through 7.0.6, FortiVoice 6.4.0 through 6.4.10 allows a remote unauthenticated attacker to execute arbitrary code or commands via sending HTTP requests with specially crafted hash cookie.

Who should care

• Teams operating Forticamera Firmware, Fortimail, Fortindr +3 more
• Vulnerability and exposure management teams
• Security operations teams monitoring exploitation activity

Response plan

What I would do

1. Confirm whether Forticamera Firmware, Fortimail, Fortindr +3 more is present in the environment.
2. Identify affected versions and establish whether vulnerable services are exposed or reachable.
3. Fortinet Security advisory FG IR 25 254
4. Review relevant security telemetry for evidence of attempted or successful exploitation.
5. Document the remediation decision and track it to verified completion.

Technical details

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-124

Affected versions

Fortinet Forticamera Firmware (Start Including 2.0.0, End Including 2.1.3 | Start Including 1.1.0, End Including 1.1.5); Fortinet Fortimail (Start Including 7.0.0, End Excluding 7.0.9 | Start Including 7.2.0, End Excluding 7.2.8 | Start Including 7.4.0, End Excluding 7.4.5 | Start Including 7.6.0, End Excluding 7.6.3); Fortinet Fortindr (Start Including 7.0.0, End Excluding 7.0.7 | Start Including 7.2.0, End Excluding 7.2.5 | Start Including 7.4.0, End Excluding 7.4.8 | Version 1.1.0); Fortinet Fortirecorder (Start Including 6.4.0, End Excluding 6.4.6 | Start Including 7.0.0, End Excluding 7.0.6 | Start Including 7.2.0, End Excluding 7.2.4); Fortinet Fortivoice (Start Including 6.4.0, End Excluding 6.4.11 | Start Including 7.0.0, End Excluding 7.0.7 | Version 7.2.0); Fortinet Multiple Products

Fixed versions

Fortinet Fortimail (Fixed from 7.0.9, 7.2.8, 7.4.5, 7.6.3); Fortinet Fortindr (Fixed from 7.0.7, 7.2.5, 7.4.8); Fortinet Fortirecorder (Fixed from 6.4.6, 7.0.6, 7.2.4); Fortinet Fortivoice (Fixed from 6.4.11, 7.0.7)

Published

13 May 2025

Attack vector

Network

Privileges required

None

User interaction

None

Signal timeline

1. 13 May 2025Added to CISA KEV
2. 22 Aug 2026Latest EPSS score: 29.8%
3. 19 Aug 2026 · 12:58 UTCSignal calculated at 76

External references

• CISA Government advisory CVE-2025-32756 ↗