
Imagine a scenario where a single crafted email request can unlock full control over an organization’s email infrastructure, exposing sensitive communications to malicious actors. This alarming possibility became a reality with the discovery of CVE-2025-59689, a severe command injection vulnerability in widely used email security appliances. This flaw, found in Libraesva Email Security Gateway (ESG) devices, has sent shockwaves through










