Unrated severityNVD Advisory· Published Jan 28, 2026· Updated Jan 28, 2026
Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server
CVE-2025-59893
Description
Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of proper CSRF token implementation. Among other things, it is possible, using a POST request to rename commands via '/rename_command?sid=', affecting the 'command_name' parameter.
Affected products
4- Range: <=10.4.18
- Range: <=10.4.18
- Flexense/Disk Pulse Enterprisev5Range: v10.4.18
- Flexense/Sync Breeze Enterprise Serverv5Range: v10.4.18
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.