CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Libraesva ESG Command Injection Vulnerability via Compressed Email Attachment (CVE-2025-59689) Analysis and Mitigation Guide
[Affected Scope] Libraesva ESG versions 4.5 through 5.5.x before 5.5.7 (including versions prior to 5.0.31, 5.1.20, 5.2.31, and 5.4.8)
[Impact] Remote attackers can execute arbitrary system commands and compromise the gateway by sending a specially crafted compressed email attachment
[Mitigation] Immediately upgrade to the designated patched versions (5.5.7, 5.4.8, 5.2.31, 5.1.20, or 5.0.31) depending on your active release branch
Barracuda Email Security Gateway (ESG) Remote Command Injection Vulnerability (CVE-2023-2868) Security Advisory
[Affected Scope] Barracuda Email Security Gateway (appliance form factor only) versions 5.1.3.001 through 9.2.0.006
[Impact] A remote attacker can execute arbitrary system commands with the privileges of the ESG product by sending a specially crafted .tar archive, leading to complete system compromise
[Mitigation] Verify the automatic application of patch BNSF-36456, perform a thorough compromise assessment (IoC search), and immediately replace compromised appliances