CVE

CVE-2025-59689

Libraesva Email Security Gateway Command Injection Vulnerability

Libraesva · Email Security Gateway

Date added (CISA)

2025-09-29

Remediation due

2025-10-20

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Libraesva Email Security Gateway (ESG) contains a command injection vulnerability which allows command injection via a compressed e-mail attachment.