A vulnerability, which was classified as critical, has been found in Fortinet FortiVoice up to 6.4.10/7.0.6/7.2.0. This affects an unknown function of the component HTTP/HTTPS/CLI. The manipulation leads to os command injection.

This vulnerability is traded as CVE-2025-47856. It is possible to initiate the attack remotely. There is no exploit available.