CVE-2026-9157

HighCVSS 8.4

Published: 21/05/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

Gmission Web Fax versions 3.0 before 3.1 contain an unrestricted upload of dangerous file types and improper input validation vulnerability, allowing remote code execution.

Risk Assessment

The risk is that an attacker can execute arbitrary code remotely, potentially leading to full server compromise and data theft.

Recommendation

Upgrade Gmission Web Fax to version 3.1 or later, which includes fixes for input validation and file type restrictions.

Other vulnerabilities in Gmission Web Fax

CVE-2025-15069High
An improper authentication vulnerability in Gmission Web Fax allows privilege escalation. This affects versions from 3.0 before 3.0.1.

Original NVD description (English source)

Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remote Code Inclusion. This issue affects Web Fax: from 3.0 before 3.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS