Patch days / May 2025

Fortinet PSIRT Monthly Advisories — May 2025

Tuesday, 13 May 2025

Vulnerabilities: 3
Critical: 1
High: 0
Zero-days: 1
Public exploit: 1

Exploited 1

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

Critical 9.6
CVE-2025-32756 Zero-day Public exploit A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 …
EPSS 31%

All vulnerabilities 3

Critical1 Show

Critical 9.6
CVE-2025-32756 Zero-day Public exploit A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 …
EPSS 31%

Medium1 Show

Medium 5.0
CVE-2025-22859 A Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and FortiClientEMS Cloud 7.4.0 through 7.4.1 may allow a remote unauthen…

Low1 Show

Low 2.3
CVE-2024-35281 An improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7.4.2 and below, version 7.2.8 and below, 7.0 all versions and …