Libraesva Email Security Gateway vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Libraesva Email Security Gateway: 1 record(s), with affected versions and fixes.
cpe:2.3:a:libraesva:email_security_gateway

CVE-2025-59689 Medium · 6.1 KEV High · 50 CWE-77 Sep 19, 2025

Libraesva Email Security Gateway Command Injection Vulnerability

Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix has been released in 5.0.31. For ESG 5.1 a fix has been released in 5.1.20. For ESG 5.2 a fix has been released in 5.2.31. For ESG 5.4 a fix has been released in 5.4.8. For ESG 5.5. a fix has been released in 5.5.7.