CVE-2026-9157: Gmission Web Fax

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remote Code Inclusion. This issue affects Web Fax: from 3.0 before 3.1.

Affected products

• Gmission Web Fax: from 3.0, before 3.1 (fixed in 3.1)

Published 2026-05-21. Last modified 2026-07-23.