CVE-2023-53954 - ActFax 10.10 Unquoted Path Services Privilege Escalation Vulnerability

CVE ID : CVE-2023-53954 Published : Dec. 19, 2025, 9:15 p.m. | 1 hour, 10 minutes ago Description : ActFax 10.10 contains an unquoted service path vulnerability that allows local attackers to potentially escalate privileges by exploiting the ActiveFaxServiceNT service configuration. Attackers with write permissions to Program Files directories can inject a malicious ActSrvNT.exe executable to gain elevated system access when the service restarts. Severity: 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor