CVE-2025-58462: Opexustech Foiaxpress Public Access Link

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

OPEXUS FOIAXpress Public Access Link (PAL) before version 11.13.1.0 allows SQL injection via SearchPopularDocs.aspx. A remote, unauthenticated attacker could read, write, or delete any content in the underlying database.

Affected products

• Opexustech Foiaxpress Public Access Link: before 11.13.1.0 (fixed in 11.13.1.0)

Published 2025-09-09. Last modified 2026-09-30.