VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 8, 2026· Updated Jan 9, 2026

CVE-2025-56425

CVE-2025-56425

Description

An issue was discovered in the AppConnector component version 10.10.0.183 and earlier of enaio 10.10, in the AppConnector component version 11.0.0.183 and earlier of enaio 11.0, and in the AppConnctor component version 11.10.0.183 and earlier of enaio 11.10. The vulnerability allows authenticated remote attackers to inject arbitrary SMTP commands via crafted input to the /osrest/api/organization/sendmail endpoint

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • enaio/enaiodescription
  • enaio/AppConnectorllm-create
    Range: 10.10.0.183 and earlier for enaio 10.10; 11.0.0.183 and earlier for enaio 11.0; 11.10.0.183 and earlier for enaio 11.10

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.