CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-09-19
Libraesva ESG Command Injection Vulnerability via Compressed Email Attachment (CVE-2025-59689) Analysis and Mitigation Guide
[Affected Scope] Libraesva ESG versions 4.5 through 5.5.x before 5.5.7 (including versions prior to 5.0.31, 5.1.20, 5.2.31, and 5.4.8)
[Impact] Remote attackers can execute arbitrary system commands and compromise the gateway by sending a specially crafted compressed email attachment
[Mitigation] Immediately upgrade to the designated patched versions (5.5.7, 5.4.8, 5.2.31, 5.1.20, or 5.0.31) depending on your active release branch