Email Security Gateway
1 CVEs
product
Monthly
Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and no vendor patch available.
Command Injection
Email Security Gateway
NVD
CVSS 3.1
6.1
EPSS
6.9%
CVE-2025-59689
EPSS 7%
CVSS 6.1
MEDIUM
KEV
THREAT
Act Now
Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and no vendor patch available.
Command Injection
Email Security Gateway
NVD