CVE-2006-3126: Julian Pawlowski CAPI4HYLAFAX

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

c2faxrecv in capi4hylafax 01.02.03 allows remote attackers to execute arbitrary commands via null (\0) and shell metacharacters in the TSI string, as demonstrated by a fax from an anonymous number.

Affected products

• Julian Pawlowski CAPI4HYLAFAX: version 01.02.03 only

Published 2006-09-06. Last modified 2026-06-16.