CVE-2025-32766: Buffer Overflow
Published Aug 12, 2025
·Updated
A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiWeb CLI version 7.6.0 through 7.6.3 and before 7.4.8 allows a privileged attacker to execute arbitrary code or commands via crafted CLI commands
Affected Software
3 affected components
Fortinet FortiWeb CLI>=7.6.0<7.6.3, <7.4.8
Fortinet FortiWeb>=7.4.1<7.4.9
Fortinet FortiWeb>=7.6.0<7.6.4
Remediation
Information
Please upgrade to FortiWeb version 8.0.0 or above
Please upgrade to FortiWeb version 7.6.4 or above
Please upgrade to FortiWeb version 7.4.9 or above
Event History
Aug 12, 2025
CVE Published
via MITRE·06:59 PM
Data Sourced
via MITRE·06:59 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-32766?
CVE-2025-32766 has a high severity rating due to its potential for remote code execution.
2
How do I fix CVE-2025-32766?
To fix CVE-2025-32766, upgrade to Fortinet FortiWeb CLI version 7.6.4 or later.
3
What systems are affected by CVE-2025-32766?
CVE-2025-32766 affects Fortinet FortiWeb CLI versions 7.6.0 through 7.6.3 and before 7.4.8.
4
Can CVE-2025-32766 be exploited remotely?
Yes, CVE-2025-32766 can be exploited remotely by a privileged attacker using crafted CLI commands.
5
What type of vulnerability is CVE-2025-32766?
CVE-2025-32766 is classified as a stack-based buffer overflow vulnerability.