CVE-2025-15070: Gmission Web Fax

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse. This issue affects Web Fax: from 3.0 before 3.0.1

Affected products

• Gmission Web Fax: from 3.0, before 4.0 (fixed in 4.0)

Published 2025-12-29. Last modified 2026-10-07.