Add Nettacker module for CVE-2025-32756 (Authentication Bypass)

Proposal

I would like to propose adding a vulnerability detection module for CVE-2025-32756.

Vulnerability Summary

CVE-2025-32756 is an authentication bypass vulnerability affecting Fortinet FortiVoice / FortiMail systems. The issue allows attackers to interact with administrative functionality without proper authentication under certain conditions.

Because the vulnerability can be reached through network-accessible endpoints, it appears suitable for detection via safe HTTP requests, making it a good candidate for a Nettacker vulnerability module.

Why This Module Is Useful

• Recent vulnerability (2025)
• Enterprise infrastructure product
• Remotely reachable attack surface
• Valuable for identifying exposed systems during reconnaissance
• Detectable without executing destructive actions

Proposed Detection Logic

The module would send a crafted HTTP request to a relevant endpoint and analyze the response behavior for indicators of the vulnerability.

Example concept:
GET /admin/api/status

Detection will focus on response signatures such as:

• unexpected access to administrative endpoints
• response codes indicating bypassed authentication
• identifiable response patterns from vulnerable versions

The module will only detect exposure and will not attempt exploitation or command execution.

Testing

Testing will be performed in a controlled lab environment to verify detection behavior and ensure that the module performs non-destructive checks.

Contribution

If this module would be useful for Nettacker and no one else is currently working on it, I would be happy to implement it and submit a pull request.

Thank you for your time and guidance.

Start by reviewing existing Nettacker vulnerability modules and the CVE-2025-32756 behavior in a controlled lab. Confirm a safe request and response signatures for the proposed /admin/api/status check; done means a non-destructive module reliably identifies exposed vulnerable systems without exploitation or command execution.