CVE-2026-9157CWE-20CWE-434

Remote Code Execution in Gmission Web FAX

High · published May 21, 2026

CVSS v4.0
8.6
EPSS
0%
Percentile
6.8
In the wild
Unconfirmed
What it is

Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remote Code Inclusion.

This issue affects Web Fax: from 3.0 before 3.1.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00176 · 6.8th percentile
Weaknesses
CWE-20 · Improper Input Validation; CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2026-05-21T08:07Z
EPSS history
Timeline
  • 21 MAY 08:07Z
    Remote Code Execution in Gmission Web FAX
    cvelistv5