CVE-2025-15610 CRITICAL

CVE-2025-15610

Vendor Opentext, Inc
Product RightFax
Weakness CWE-502 · Unsafe deserialization
Published April 15, 2026
Last update April 29, 2026
View on NVD All CVEs

CVSS base score

9.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the service is exposed in environments where the remoting ports are accessible.

Key dates

02Disclosure timeline

April 15, 2026 CVE published
April 29, 2026 Record updated