CVE-2024-40587: Fortinet Fortivoice

Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days.

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiVoice version 7.0.0 through 7.0.4 and before 6.4.9 allows an authenticated privileged attacker to execute unauthorized code or commands via crafted CLI requests.

Affected products

• Fortinet Fortivoice: from 6.0.0, before 6.4.10 (fixed in 6.4.10); from 7.0.0, before 7.0.5 (fixed in 7.0.5)

Published 2025-01-14. Last modified 2026-06-17.