CVE-2025-15068

Critical · 9.8

CVSS

9.8

EPSS

0.4%

Published

Dec 29, 2025

CISA due date

—

The record

Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse, Session Credential Falsification through Manipulation.This issue affects Web Fax: from 3.0 before 3.0.1

Affected packages

Ecosystem	Package	Introduced	Fixed