CVE-2025-48047

Vulnerability Description

An authenticated user can perform command injection via unsanitized input to the NetFax Server’s ping functionality via the /test.php endpoint.

Related Weaknesses (CWE)

CWE-78

References

https://www.rapid7.com/blog/post/2025/05/29/cve-2025-48045-cve-2025-48046-cve-20

FAQ

What is CVE-2025-48047?

CVE-2025-48047 is a documented vulnerability. An authenticated user can perform command injection via unsanitized input to the NetFax Server’s ping functionality via the /test.php endpoint.

How severe is CVE-2025-48047?

CVSS scoring is not yet available for CVE-2025-48047. Check NVD for updates.

Is there a patch for CVE-2025-48047?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.