{"basis":"claimed","id":"CVE-2025-32756","name":"Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability","vendorProject":"Fortinet","product":"Multiple Products","publishedAt":"2025-05-13","cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"exploited":{"kevAdded":"2025-05-14","dueDate":"2025-06-04","ransomware":false},"epss":{"score":0.30944,"percentile":0.98259,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"blocks","firstOn":"2025-06-09","daysToRule":27},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"rule","firstOn":"2025-06-30","daysToRule":48},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}},"title":null,"description":"A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.7, FortiNDR 7.2.0 through 7.2.4, FortiNDR 7.0.0 through 7.0.6, FortiRecorder 7.2.0 through 7.2.3, FortiRecorder 7.0.0 through 7.0.5, FortiRecorder 6.4.0 through 6.4.5, FortiVoice 7.2.0, FortiVoice 7.0.0 through 7.0.6, FortiVoice 6.4.0 through 6.4.10 allows a remote unauthenticated attacker to execute arbitrary code or commands via sending HTTP requests with specially crafted hash cookie.","cwes":["CWE-121"],"vendors":[{"vendor":"cloudflare","status":"blocks","basis":"claimed","firstOn":"2025-06-09","firstIsNew":true,"daysToRule":27,"daysAtMost":null,"freePlan":false,"claims":[{"id":"383775fdf095ba4b0fee6b8d0b000901e592e6f34851b9d161021c9db7cad97e","cve_id":"CVE-2025-32756","vendor":"cloudflare","product":"Cloudflare Managed Ruleset","rule_id":"4f219ac0be3545a5be5f0bf34df8857a","rule_name":"Fortinet FortiVoice - Buffer Error - CVE:CVE-2025-32756","change":"new","default_action":"Block","published_on":"2025-06-09","source_url":"https://developers.cloudflare.com/changelog/post/2025-06-09-waf-release/","source_title":"WAF Release - 2025-06-09","excerpt":"Fortinet FortiVoice - Buffer Error - CVE:CVE-2025-32756. Previous action: Log. New action: Block. This is a New Detection","first_seen_at":"2026-11-02T21:00:16.558Z"},{"id":"1b6b0d4da8bb6dccc12a9a3bdbd51931f3be903e726249300e307974a27d256c","cve_id":"CVE-2025-32756","vendor":"cloudflare","product":"Cloudflare Managed Ruleset","rule_id":"58fcf6d9c05d4b7a8f41e0a3c329aeb0","rule_name":"Fortinet FortiVoice - Buffer Error - CVE:CVE-2025-32756","change":"new","default_action":"Disabled","published_on":"2025-07-07","source_url":"https://developers.cloudflare.com/changelog/post/2025-07-07-waf-release/","source_title":"WAF Release - 2025-07-07","excerpt":"Fortinet FortiVoice - Buffer Error - CVE:CVE-2025-32756. Previous action: Log. New action: Disabled. This is a New Detection","first_seen_at":"2026-11-02T21:00:16.350Z"}]},{"vendor":"aws","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"azure","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"google","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"fastly","status":"no_history","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"f5","status":"rule","basis":"claimed","firstOn":"2025-06-30","firstIsNew":true,"daysToRule":48,"daysAtMost":null,"freePlan":false,"claims":[{"id":"26b5ac895a00a173bdc52c6ca024dfbb45186a625961009d7385b2cca7d8be61","cve_id":"CVE-2025-32756","vendor":"f5","product":"Attack signatures","rule_id":"200011104","rule_name":"Fortinet Products Buffer Overflow","change":"new","default_action":null,"published_on":"2025-06-30","source_url":"https://docs.cloud.f5.com/docs-v2/platform/changelogs/security-details-changelog","source_title":"F5 Distributed Cloud attack signatures changelog","excerpt":"Added: signature 200011104 \"Fortinet Products Buffer Overflow\" (Buffer Overflow, risk High), systems: Other Web Server. References: CVE-2025-32756.","first_seen_at":"2026-11-02T21:00:25.890Z"}]},{"vendor":"akamai","status":"no_source","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"crs","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]}],"updatedAt":"2026-11-03T03:17:39.106Z","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C","ssvc":{"exploitation":"active","automatable":"yes","technicalImpact":"total"},"measured":[],"social":{"total":0,"first_seen":null,"daily":[{"day":"2026-10-21","posts":0},{"day":"2026-10-22","posts":0},{"day":"2026-10-23","posts":0},{"day":"2026-10-24","posts":0},{"day":"2026-10-25","posts":0},{"day":"2026-10-26","posts":0},{"day":"2026-10-27","posts":0},{"day":"2026-10-28","posts":0},{"day":"2026-10-29","posts":0},{"day":"2026-10-30","posts":0},{"day":"2026-10-31","posts":0},{"day":"2026-11-01","posts":0},{"day":"2026-11-02","posts":0},{"day":"2026-11-03","posts":0}],"top_posts":[],"exploit_repositories":[]}}