Medium severity6.1CISA KEVNVD Advisory· Published Sep 19, 2025· Updated Jun 17, 2026
CVE-2025-59689
CVE-2025-59689
Description
Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix has been released in 5.0.31. For ESG 5.1 a fix has been released in 5.1.20. For ESG 5.2 a fix has been released in 5.2.31. For ESG 5.4 a fix has been released in 5.4.8. For ESG 5.5. a fix has been released in 5.5.7.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:libraesva:email_security_gateway:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:libraesva:email_security_gateway:*:*:*:*:*:*:*:*range: >=4.5,<5.0.31
- (no CPE)range: 4.5
Patches
Vulnerability mechanics
References
3- docs.libraesva.com/knowledgebase/security-advisory-command-injection-vulnerability-cve-2025-59689/nvdVendor Advisory
- www.libraesva.com/security-blog/nvdVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.