Exploit for CVE-2025-32756

kitploit · 2026-09-05

Description

Vulnerability in FortiVoice, FortiMail, FortiNDR, FortiRecorder and FortiCamera.

Entry point

Parameterenc · header

Pathremote/hostcheck_validate

Stack-based buffer overflow in AuthHash cookie processing via enc parameter in /remote/hostcheck_validate allowing unauthenticated condition trigger.

Affected software

Fortinet Fortimail< 7.0.9, 7.2.8, 7.4.5, 7.6.3

Fortinet Fortindr< 7.0.7, 7.2.5, 7.4.8, 1.1.0, 1.2.0, 1.3.0, 1.4.0, 1.5.0, 7.1.0, 7.1.1, 7.6.0

Fortinet Fortirecorder< 6.4.6, 7.0.6, 7.2.4

Fortinet Fortivoice< 6.4.11, 7.0.7, 7.2.0

All known vulnerabilities by product

Forticamera Fortimail Fortindr Fortirecorder Fortivoice

CVSS 9.8 for CVE-2025-32756

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

Exploit Details

Modified:2026-09-05 03:14

Last Seen:2026-09-05 12:53

Reporter:KitPloit

Tags

FortiVoiceFortiMailFortiNDRFortiRecorderFortiCameramultiple products

Other exploits for CVE-2025-32756

CVE-2025-32756-POC

2026-09-07 KitPloitKITPLOIT

CVE-2025-32756-POC

2026-09-06 KitPloitKITPLOIT

CVE-2025-32756-POC

2026-09-06 KitPloitKITPLOIT

2026-09-05 KitPloitKITPLOIT

Exploit for Out-of-bounds Write in Fortinet Fortimail

2025-06-09 alm6no5GITHUB

Exploit for Out-of-bounds Write in Fortinet Fortimail

2025-06-08 B1ack4shGITHUB

Exploit for Out-of-bounds Write in Fortinet Fortimail

2025-06-05 kn0x0xGITHUB

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-BECREVEX-CVE-2025-32756
# CVE-2025-32756

CVE-2025-32756: FortiVoice, FortiMail, FortiNDR, FortiRecorder и FortiCamera Уязвимость