PT-2025-53692 · Unknown · Gmission Web Fax

Published 2025-12-29 · Updated 2026-01-09 · CVE-2025-15069

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Gmission Web Fax versions 3.0 through 3.9

Description An improper authentication issue exists in Gmission Web Fax that can lead to privilege escalation. The issue affects the application’s authentication mechanisms, potentially allowing unauthorized access and elevated privileges.

Recommendations Update Gmission Web Fax to version 4.0 or later.

Fix

LPE

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-15069

Affected Products

Gmission Web Fax

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-15069 · Security Note
• https://osv.dev/vulnerability/CVE-2025-15069 · Vendor Advisory
• https://t.me/cveNotify/148151 · Telegram Post
• https://gmission.co.kr/fax1 · Note
• https://t.me/cveNotify/147018 · Telegram Post
• https://t.me/CVEtracker/40809 · Telegram Post