CVE-2025-32756

State: Published
Severity: 9.6 Critical
Published: May 13, 2025
Updated: Feb 26, 2026
Reserved: Apr 10, 2025

Description

A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.7, FortiNDR 7.2.0 through 7.2.4, FortiNDR 7.0.0 through 7.0.6, FortiRecorder 7.2.0 through 7.2.3, FortiRecorder 7.0.0 through 7.0.5, FortiRecorder 6.4.0 through 6.4.5, FortiVoice 7.2.0, FortiVoice 7.0.0 through 7.0.6, FortiVoice 6.4.0 through 6.4.10 allows a remote unauthenticated attacker to execute arbitrary code or commands via sending HTTP requests with specially crafted hash cookie.

Scores

CVSS	Score	Vector	Source
3.1	9.6 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C	fortinet

Weaknesses

CWE-121 Execute unauthorized code or commands

Affected Products

Product	Versions
FortiNDRFortinet	7.6.0Affected 7.4.0 through 7.4.7Affected 7.2.0 through 7.2.4Affected 7.1.0 through 7.1.1Affected 7.0.0 through 7.0.6Affected 1.5.0 through 1.5.3Affected 1.4.0Affected 1.3.0 through 1.3.1Affected 1.2.0Affected 1.1.0Affected
FortiCameraFortinet	2.1.0 through 2.1.3Affected 2.0.0Affected 1.1.0 through 1.1.5Affected
FortiRecorderFortinet	7.2.0 through 7.2.3Affected 7.0.0 through 7.0.5Affected 6.4.0 through 6.4.5Affected
FortiVoiceFortinet	7.2.0Affected 7.0.0 through 7.0.6Affected 6.4.0 through 6.4.10Affected
FortiMailFortinet	7.6.0 through 7.6.2Affected 7.4.0 through 7.4.4Affected 7.2.0 through 7.2.7Affected 7.0.0 through 7.0.8Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.