VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 14, 2025· Updated Oct 14, 2025

CVE-2025-47856

CVE-2025-47856

Description

Two improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiVoice version 7.2.0, 7.0.0 through 7.0.6 and before 6.4.10 allows a privileged attacker to execute arbitrary code or commands via crafted HTTP/HTTPS or CLI requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Fortinet/Fortivoicev52 versions
    cpe:2.3:a:fortinet:fortivoice:7.2.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortivoice:7.2.0:*:*:*:*:*:*:*range: 7.2.0
    • (no CPE)range: 7.2.0, 7.0.0-7.0.6, <6.4.10

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.