Exploit / PoCcritical
Libraesva ESG zero-day vulnerability exploited by attackers (CVE-2025-59689)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-59689 | Command Injection in Libraesva Email Security Gateway Exploited in the Wild | 6.1 | 2% | KEV | KEV |
From the original article
2 min read at helpnetsecurity.com
Suspected state-sponsored attackers have exploited a zero-day vulnerability (CVE-2025-59689) in the Libraesva Email Security Gateway (ESG), the Italian email security company has confirmed. CVE-2025-59689 is a command injection vulnerability caused by improper sanitization when removing active code from files inside certain compressed archive formats.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.