alm6no5/cve-2025-32756-pocProof-of-concept exploit for a critical stack-based buffer overflow in Fortinet products, enabling unauthenticated remote code execution via the AuthHash cookie. Includes usage instructions and mitigation details.
A proof-of-concept for the critical stack-based buffer overflow vulnerability (CVE-2025-32756) affecting Fortinet products.
The vulnerability exists in the processing of the enc parameter in the /remote/hostcheck_validate endpoint, where improper bounds checking allows buffer overflow.
python3 fortinet_cve_2025_32756_poc.py target_ip [-p port] [-d]
target_ip: Target Fortinet device-p, --port: Target port (default: 443)-d, --debug: Enable debug outputUpdate to patched versions:
For educational and research purposes only. Use only against systems you own or have permission to test.