foiaxpress public access link vulnerabilities and fixes

Recent CVEs affecting foiaxpress public access link, with upgrade or downgrade steps. 5 tracked.

Also searched as: foiaxpresspublicaccesslink.

foiaxpress public access link has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-09-09. Highest priority: CVE-2024-53553 (score 54/100).

• CVE-2025-58462 CRITICAL 9.8 UPGRADE OPEXUS FOIAXpress Public Access Link (PAL) before version 11.13.1.0 allows SQL injection via SearchPopularDocs
• CVE-2025-54834 MEDIUM 5.3 UPGRADE OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows an unauthenticated, remote attacker to query
• CVE-2025-54833 MEDIUM 5.3 UPGRADE OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows attackers to bypass account-lockout and CAPT
• CVE-2025-54832 MEDIUM 4.3 UPGRADE OPEXUS FOIAXpress Public Access Link (PAL), version v11.1.0, allows an authenticated user to add entries to th
• CVE-2024-53553 CRITICAL 9.1 DOWNGRADE An issue in OPEXUS FOIAXPRESS PUBLIC ACCESS LINK v11.1.0 allows attackers to bypass authentication via crafted

FAQ

How do I fix foiaxpress public access link vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is foiaxpress public access link being exploited right now?

None of the tracked foiaxpress public access link CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which foiaxpress public access link CVE should I patch first?

CVE-2024-53553 currently ranks highest (54/100): An issue in OPEXUS FOIAXPRESS PUBLIC ACCESS LINK v11.1.0 allows attackers to bypass authentication via crafted.

RSS feed for foiaxpress public access link · ← Back to latest CVEs