PT-2026-7605 · Unknown · Activefax Server

Cakes · Publicado 2026-02-11 · Atualizado 2026-02-11 · CVE-2019-25310

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ActiveFax Server version 6.92 Build 0316

Description ActiveFax Server 6.92 Build 0316 contains an unquoted service path vulnerability in the ActiveFaxServiceNT service. This allows local attackers to potentially execute arbitrary code by exploiting the unquoted binary path to inject malicious executables. These executables can then be launched with elevated administrative privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2019-25310

Produtos afetados

Activefax Server

Referências · 5

• 🔥 https://exploit-db.com/exploits/47503 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25310 · Nota de Segurança
• https://actfax.com · Nota
• https://vulncheck.com/advisories/activefax-server-build-activefaxservicent-unquoted-service-path · Nota
• https://t.me/CVEtracker/44424 · Publicação no Telegram