VYPR
← All advisories
Critical severity9.1NVD Advisory· Published Jan 8, 2026· Updated Jun 17, 2026

CVE-2025-56425

CVE-2025-56425

Description

An issue was discovered in the AppConnector component version 10.10.0.183 and earlier of enaio 10.10, in the AppConnector component version 11.0.0.183 and earlier of enaio 11.0, and in the AppConnctor component version 11.10.0.183 and earlier of enaio 11.10. The vulnerability allows authenticated remote attackers to inject arbitrary SMTP commands via crafted input to the /osrest/api/organization/sendmail endpoint

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • enaio/enaiodescription
  • enaio/enaiollm-create
    Range: <=10.10.0.183, <=11.0.0.183, <=11.10.0.183
  • enaio/AppConnectorllm-fuzzy
    Range: <=10.10.0.183, <=11.0.0.183, <=11.10.0.183
  • Optimal Systems/Enaio
    cpe:2.3:a:optimal-systems:enaio:*:*:*:*:*:*:*:*
    Range: >=10.10.0.0,<10.10.0.183

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.