CVE-2025-9588

CRÍTICO 9.8CVE-2025-9588 · Published 23/09/2025 · updated 18/10/2026

Em resumo

CVE-2025-9588 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta envision (ironmountain).
Chance de exploração nos próximos 30 dias (EPSS): 1.1%, maior que 65.8% das vulnerabilidades.
Correção: atualize para 250563 ou posterior.

Package	Affected versions	Patched versions
envision ironmountain	`< 250563`	`250563`

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Iron Mountain Archiving Services Inc. EnVision allows Command Injection. This issue affects enVision: before 250563.

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0285
usom.gov.tr/bildirim/tr-25-0285 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free