CVE-2025-48046

Published: May 29, 2025

Modified: Sep 5, 2025

PUBLISHED

An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint.

Vendor	Product	Versions
MICI Network Co. Ltd.	NetFax Server	affected `0 - < 3.0.1.0`

third-party-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.