Fortinet’s Vulnerability Patch-a-Palooza: Critical Fixes You Can’t Ignore!
Fortinet has released patches for a dozen vulnerabilities, including a critical zero-day bug, CVE-2025-32756, affecting FortiVoice phone systems. This flaw, with a severity score of 9.6, lets unauthenticated attackers execute code using crafted HTTP requests. Customers are urged to patch pronto, lest their phone systems become a hotline for hackers.
Hot Take:
Looks like Fortinet just played a game of whack-a-mole with vulnerabilities, and the moles were winning for a while! FortiVoice users, it’s time to hang up those phones and patch faster than you can say ‘zero-day exploit’. Who knew phone systems could be this exciting?
Key Points:
- Fortinet patched a critical zero-day vulnerability (CVE-2025-32756) in FortiVoice phone systems.
- Threat actors exploited this vulnerability in the wild, affecting multiple Fortinet products.
- Patches were also issued for other critical and high-severity vulnerabilities across Fortinet’s product suite.
- Fortinet advises disabling HTTP/HTTPS administrative interfaces as a workaround for the zero-day.
- Additional affected products and updates are detailed in Fortinet’s PSIRT advisories.
Already a member? Log in here