CVE-2025-59689 Libraesva Email Security Gateway
Libraesva Email Security Gateway (ESG) contains a command injection vulnerability which allows command injection via a compressed e-mail attachment.
- CVSS
- not scored
On CISA’s exploited list
Libraesva Email Security Gateway Command Injection Vulnerability
- Added
- 2025-09-29
- Federal patch deadline
- 2025-10-20
- Ransomware use
- not known