PT-2026-7605 · Unknown · Activefax Server

Cakes · Published 2026-02-11 · Updated 2026-02-11 · CVE-2019-25310

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ActiveFax Server version 6.92 Build 0316

Description ActiveFax Server 6.92 Build 0316 contains an unquoted service path vulnerability in the ActiveFaxServiceNT service. This allows local attackers to potentially execute arbitrary code by exploiting the unquoted binary path to inject malicious executables. These executables can then be launched with elevated administrative privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2019-25310

Affected Products

Activefax Server

References · 5

• 🔥 https://exploit-db.com/exploits/47503 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25310 · Security Note
• https://actfax.com · Note
• https://vulncheck.com/advisories/activefax-server-build-activefaxservicent-unquoted-service-path · Note
• https://t.me/CVEtracker/44424 · Telegram Post