Libraesva vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Libraesva products: 1 record(s), with severity, exploitation and fixes.

Email Security Gateway 1

Exploited only (KEV) →

CVE-2025-59689 Medium · 6.1 KEV High · 50 CWE-77 Sep 19, 2025

Libraesva Email Security Gateway Command Injection Vulnerability

Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix has been released in 5.0.31. For ESG 5.1 a fix has been released in 5.1.20. For ESG 5.2 a fix has been released in 5.2.31. For ESG 5.4 a fix has been released in 5.4.8. For ESG 5.5. a fix has been released in 5.5.7.