CVE-2025-15610

State: Published
Severity: 9.3 Critical
Published: Apr 15, 2026
Updated: Apr 29, 2026
Reserved: Mar 16, 2026

Description

The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the service is exposed in environments where the remoting ports are accessible.

Scores

CVSS	Score	Vector	Source
4.0	9.3 Critical	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	OpenText

Weaknesses

CWE-502 Deserialization of untrusted data

Affected Products

Product	Versions
RightFaxOpenText, Inc	16.6 through 16.6 Update7136Affected 20.2 through 20.2 Update5705Affected 21.2 through 21.2.1.2707Affected 22.2 through 22.2.0.1644Affected 23.4 through 26.4.0.1644Affected 24.4 through 24.4.0.1644Affected 25.4 through 25.4.0.1644Affected

References

https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0861863

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.