Rightfax EUVD-2025-209477

Q: What is the CVSS score of EUVD-2025-209477?

EUVD-2025-209477 has a CVSS 4.0 base score of 9.3 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2025-15610 CRITICAL

Deserialization of Untrusted Data (CWE-502)

2026-04-15 OpenText

GHSA-7hj6-v8wx-jqjx

Deserialization Microsoft Rightfax

9.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

9.3 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 15:25 vuln.today

EUVD ID Assigned

Apr 15, 2026 - 16:45 euvd

EUVD-2025-209477

CVE Published

Apr 15, 2026 - 16:31 nvd

CRITICAL 9.3

DescriptionCVE.org

Deserialization of untrusted data vulnerability in OpenText, Inc RightFax on Windows, 64 bit, 32 bit allows Object Injection.This issue affects RightFax: through 25.4.

AnalysisAI

Remote code execution in OpenText RightFax on Windows via unsafe deserialization allows unauthenticated attackers to execute arbitrary code. All versions through 25.4 are affected, spanning multiple major releases, with patches now available from OpenText. No public exploit or active exploitation has been identified at time of analysis, but the vulnerability is automatable and carries total technical impact.