VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 8, 2026· Updated Jan 9, 2026

CVE-2025-56425

CVE-2025-56425

Description

An issue was discovered in the AppConnector component version 10.10.0.183 and earlier of enaio 10.10, in the AppConnector component version 11.0.0.183 and earlier of enaio 11.0, and in the AppConnctor component version 11.10.0.183 and earlier of enaio 11.10. The vulnerability allows authenticated remote attackers to inject arbitrary SMTP commands via crafted input to the /osrest/api/organization/sendmail endpoint

Affected products

2
  • enaio/enaiodescription
  • enaio/AppConnectorllm-create
    Range: 10.10.0.183 and earlier for enaio 10.10; 11.0.0.183 and earlier for enaio 11.0; 11.10.0.183 and earlier for enaio 11.10

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.