PT-2026-2473 · Fortinet · Fortivoice

Published 2026-01-13 · Updated 2026-01-13 · CVE-2025-58693

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:S/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions Fortinet FortiVoice versions 7.0.0 through 7.0.7 Fortinet FortiVoice versions 7.2.0 through 7.2.2

Description A path traversal issue exists in Fortinet FortiVoice. A privileged attacker can delete files from the underlying filesystem by sending specially crafted HTTP or HTTPS requests. The issue stems from insufficient validation of file paths, allowing access to restricted directories.

Recommendations Update Fortinet FortiVoice to a version later than 7.0.7. Update Fortinet FortiVoice to a version later than 7.2.2.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2026-05215

CVE-2025-58693

Affected Products

Fortivoice

References · 5

• https://fortiguard.fortinet.com/psirt/FG-IR-25-778 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05215 · Security Note
• https://osv.dev/vulnerability/CVE-2025-58693 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58693 · Security Note
• https://twitter.com/CVEnew/status/2011120641663971480 · Twitter Post