← All advisories

Medium severityNVD Advisory· Published May 29, 2025· Updated Apr 15, 2026

CVE-2025-48046

CVE-2025-48046

Description

An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Patches

Vulnerability mechanics

References

1

www.rapid7.com/blog/post/2025/05/29/cve-2025-48045-cve-2025-48046-cve-2025-48047-mici-netfax-server-product-vulnerabilities-not-fixed/nvd

News mentions

0

No linked articles in our index yet.

CVE-2025-48046 · Medium · VYPR