New Fortinet and Ivanti Zero Days Exploited in the Wild
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-32756 | Stack-based overflow RCE in Fortinet FortiMail, FortiVoice, FortiNDR, FortiFone | 9.8 | 31% | KEV | KEV |
CVE-2025-4428+1 related CVE | Authenticated Code Injection RCE in Ivanti Endpoint Manager Mobile (EPMM) API | 8.8 group max | 88% | KEV | KEV |
From the original article
3 min read at infosecurity-magazine.com
Fortinet and Ivanti have warned customers that attackers are exploiting new zero day vulnerabilities affecting a range of products. The tech firms published separate advisories on the flaws, one of which is critical, on May 13, urging customers to apply fixes as soon as possible. Cybersecurity vendor Fortinet provided details on a stack-based overflow vulnerability, CVE-2025-32756.
By James Coker · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.