CVE-2025-59689

Product

Libraesva / Email Security Gateway

Vulnerability

Libraesva Email Security Gateway Command Injection Vulnerability

Added to KEV

Sep 29, 2025

Remediate by

Oct 20, 2025

Known ransomware use

No

Summary description

Libraesva Email Security Gateway (ESG) contains a command injection vulnerability which allows command injection via a compressed e-mail attachment.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://docs.libraesva.com/knowledgebase/security-advisory-command-injection-vulnerability-cve-2025-59689/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-59689