Fortinet fixes critical zero-day exploited in FortiVoice attacks

Fortinet released patches for a critical, actively exploited zero-day (CVE-2025-32756) affecting FortiVoice and other Fortinet products that permits unauthenticated remote code execution via malicious HTTP requests; observed attack activity included specific attacker IPs, fcgi debugging being enabled on compromised systems, malware drops, credential-harvesting cron jobs, and network-scanning scripts, with mitigation recommending immediate patching or disabling HTTP/HTTPS admin access.