{
    "id": "CVE-2025-32756",
    "published": "2025-05-13 15:15:57",
    "last_modified": "2026-06-17 09:12:32",
    "cvss_score": "9.8",
    "cvss_severity": "CRITICAL",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "cwe": "CWE-121",
    "description": "A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.7, FortiNDR 7.2.0 through 7.2.4, FortiNDR 7.0.0 through 7.0.6, FortiRecorder 7.2.0 through 7.2.3, FortiRecorder 7.0.0 through 7.0.5, FortiRecorder 6.4.0 through 6.4.5, FortiVoice 7.2.0, FortiVoice 7.0.0 through 7.0.6, FortiVoice 6.4.0 through 6.4.10 allows a remote unauthenticated attacker to execute arbitrary code or commands via sending HTTP requests with specially crafted hash cookie.",
    "epss_score": "0.29812",
    "epss_percentile": "0.98144",
    "kev": 1,
    "kev_due": "2025-06-04",
    "has_exploit": 0,
    "updated_at": "2026-09-26 18:37:59",
    "priority": {
        "rank": 1,
        "label": "Patch first",
        "why": "On CISA KEV — known exploited in the wild, due 2025-06-04."
    },
    "products": [
        {
            "vendor": "fortinet",
            "product": "forticamera"
        },
        {
            "vendor": "fortinet",
            "product": "forticamera_firmware"
        },
        {
            "vendor": "fortinet",
            "product": "fortimail"
        },
        {
            "vendor": "fortinet",
            "product": "fortindr"
        },
        {
            "vendor": "fortinet",
            "product": "fortirecorder"
        },
        {
            "vendor": "fortinet",
            "product": "fortivoice"
        }
    ],
    "kev_detail": {
        "cve_id": "CVE-2025-32756",
        "date_added": "2025-05-14",
        "due_date": "2025-06-04",
        "vendor": "Fortinet",
        "product": "Multiple Products",
        "name": "Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability",
        "ransomware": 0
    },
    "exploits": [],
    "refs_list": [
        "https://fortiguard.fortinet.com/psirt/FG-IR-25-254",
        "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-32756"
    ]
}