CVE-2025-59689
CVSS Score
6.1
EPSS Score
0.0%
EPSS Percentile
0th
Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix has been released in 5.0.31. For ESG 5.1 a fix has been released in 5.1.20. For ESG 5.2 a fix has been released in 5.2.31. For ESG 5.4 a fix has been released in 5.4.8. For ESG 5.5. a fix has been released in 5.5.7.
| CWE | CWE-77 |
| Vendor | libraesva |
| Product | email security gateway |
| Published | Sep 19, 2025 |
| Last Updated | Feb 26, 2026 |
⚠️ Actively Exploited — Act Now
Get instant alerts for libraesva email security gateway
This vulnerability is actively exploited in the wild. Set up free real-time alerts so you're first to know about threats like CVE-2025-59689.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Libraesva / Email Security Gateway
4.5 < 5.0.31 5.1 < 5.1.20 5.2 < 5.2.31 5.3 < 5.4.8 5.5 < 5.5.7