VulnSocial

CVE-2025-58462(opexustech / foiaxpress_public_access_link)

LOWCVSS 9.3 · CRITICAL

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

OPEXUS FOIAXpress Public Access Link (PAL) before version 11.13.1.0 allows SQL injection via SearchPopularDocs.aspx. A remote, unauthenticated attacker could read, write, or delete any content in the underlying database.

opexustech CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • foiaxpress_public_access_link

Affected systems

Vendors
opexustech
Products
foiaxpress_public_access_link

Deep dive

Full discourse1 post
  • DFIR Lab@DFIR_Lab

    🚨 CRITICAL: CVE-2025-58462 (CVSS 9.8) OPEXUS FOIAXpress PAL <11[.]13[.]1[.]0 vulnerable to unauthenticated SQL injection via SearchPopularDocs[.]aspx. Remote attackers can read/write/delete database content. Patch immediately! #CVE #PatchNow https://t.co/Ah70YeoV7f

    0000017
    150 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appopexustechfoiaxpress_public_access_link---

Explore more

Back to dashboardopexustech CVEsfoiaxpress_public_access_link vulnerabilities