⚠ Actively exploited

Added to CISA KEV on 2025-05-14. Federal agencies required to patch by 2025-06-04. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable..

CVE-2025-32756

CWE-121 — Stack-based Buffer Overflow CWE-787 — Out-of-bounds Write CWE-1249 documents9 sources

Severity

9.8CRITICAL

EPSS

41.6%

top 2.59%

CISA KEV

KEV

Added 2025-05-14

Due 2025-06-04

Exploit

No known exploits

Affected products

Fortinet Fortimail Fortinet Fortindr Fortinet Fortirecorder +3 more

Timeline

PublishedMay 13

KEV addedMay 14

KEV dueJun 4

Latest updateJun 13

CISA Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Description

A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.7, FortiNDR 7.2.0 through 7.2.4, FortiNDR 7.0.0 through 7.0.6, FortiRecorder 7.2.0 through 7.2.3, FortiRecorder 7.0.0 through 7.0.5, FortiRecorder 6.4.0 through…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages10 packages

▶NVDfortinet/fortindr7.0.0 — 7.0.7+10

▶NVDfortinet/fortimail7.0.0 — 7.0.9+3

▶CVEListV5fortinet/fortindr7.4.0 — 7.4.7+9

▶CVEListV5fortinet/fortimail7.6.0 — 7.6.2+3

▶NVDfortinet/fortivoice6.4.0 — 6.4.11+2

🔴Vulnerability Details

GHSA

GHSA-fcpx-h44g-vx2x: A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiVoice versions 7↗2025-05-13

▶

CVEList

CVE-2025-32756: A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2↗2025-05-13

▶

VulnCheck

Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability↗2025

▶

🔍Detection Rules

Suricata

ET WEB_SPECIFIC_APPS Fortinet Admin API Stack-based Buffer Overflow in AuthHash Cookie (CVE-2025-32756)↗2025-06-13

▶

📋Vendor Advisories

CISA

Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability↗2025-05-14

▶

Fortinet

A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCa...↗2025-05-13

▶

🕵️Threat Intelligence

Bleepingcomputer

Fortinet fixes critical zero-day exploited in FortiVoice attacks↗2025-05-13

▶