PT-2026-33096 · Opentext · Rightfax

Harrison Neal · Published 2026-04-15 · Updated 2026-04-16 · CVE-2025-15610

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions RightFax versions prior to 25.4

Description An issue involving the deserialization of untrusted data allows for Object Injection. This flaw can lead to remote code execution without requiring authentication.

Recommendations Update to version 25.4 or later.

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-15610

Affected Products

Rightfax

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-15610 · Security Note
• https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0861863 · Note
• https://twitter.com/0dayPublishing/status/2044459407409389922 · Twitter Post
• https://twitter.com/CVEnew/status/2044737949997130184 · Twitter Post