PT-2025-53691 · Unknown · Gmission Web Fax

Published 2025-12-29 · Updated 2026-01-09 · CVE-2025-15068

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Gmission Web Fax versions 3.0 through 3.9

Description A missing authorization issue exists in Gmission Web Fax, potentially allowing privilege abuse and session credential falsification through manipulation.

Recommendations Update Gmission Web Fax to version 4.0 or later.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-15068

Affected Products

Gmission Web Fax

References · 6

• https://osv.dev/vulnerability/CVE-2025-15068 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-15068 · Security Note
• https://t.me/cveNotify/148150 · Telegram Post
• https://gmission.co.kr/fax1 · Note
• https://t.me/cveNotify/147017 · Telegram Post
• https://t.me/CVEtracker/40808 · Telegram Post