What’s Vulnerable › Products
Audiocodes Fax Server vulnerabilities
8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.
Check whether your Audiocodes Fax Server version is affected
Latest Audiocodes Fax Server vulnerabilities
- CVE-2025-34335 — AudioCodes Fax/IVR Appliance <= 2.6.23 Authenticated Command Injection via ActivateLicense.php (CVSS 8.8)
- CVE-2025-34334 — AudioCodes Fax/IVR Appliance <= 2.6.23 Authenticated Command Injection via TestFax.php & LPE (CVSS 8.8)
- CVE-2025-34333 — AudioCodes Fax/IVR Appliance <= 2.6.23 World-Writable Webroot LPE (CVSS 7.8)
- CVE-2025-34332 — AudioCodes Fax/IVR Appliance <= 2.6.23 Insecure Service Control Scripts LPE (CVSS 7.8)
- CVE-2025-34331 — AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated File Read via download.php (CVSS 7.5)
- CVE-2025-34330 — AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated Prompt File Upload via ajaxPromptUploadFile.php (CVSS 5.3)
- CVE-2025-34329 — AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated Backup Upload RCE via ajaxBackupUploadFile.php (CVSS 9.8)
- CVE-2025-34328 — AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated File Upload RCE via ajaxScript.php (CVSS 9.8)