Critical severity10.0NVD Advisory· Published Sep 23, 2025· Updated Jun 5, 2026

CVE-2025-9588

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Iron Mountain Archiving Services Inc. EnVision allows Command Injection.

This issue affects enVision: before 250563.

Affected products

Ironmountain/Envision
cpe:2.3:a:ironmountain:envision:*:*:*:*:*:*:*:*
Range: <250563
Iron Mountain Archiving Services Inc./EnVisionllm-fuzzy2 versions
<250563+ 1 more
- (no CPE)range: <250563
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.usom.gov.tr/bildirim/tr-25-0285nvdThird Party Advisory
siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0285nvd

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000