VYPR
← All advisories
High severity7.2NVD Advisory· Published Oct 14, 2025· Updated Jun 17, 2026

CVE-2025-47856

CVE-2025-47856

Description

Two improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiVoice version 7.2.0, 7.0.0 through 7.0.6 and before 6.4.10 allows a privileged attacker to execute arbitrary code or commands via crafted HTTP/HTTPS or CLI requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Fortinet/Fortivoice3 versions
    cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*range: >=6.4.0,<6.4.11
    • cpe:2.3:a:fortinet:fortivoice:7.2.0:*:*:*:*:*:*:*
    • (no CPE)range: 7.2.0, 7.0.0-7.0.6, <6.4.10

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.