CVE-2025-9588

CriticalCVSS 9.8/10Last modified Oct 18, 2026

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Iron Mountain Archiving Services Inc. EnVision allows Command Injection.

This issue affects enVision: before 250563.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
Iron Mountain Archiving Services Inc.	enVision	< 250563

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0285
https://www.usom.gov.tr/bildirim/tr-25-0285Third Party Advisory

Timeline

Published: Sep 23, 2025
Last modified: Oct 18, 2026
NVD status: Modified

Related CVEs from 2025

CVE-2025-95892.5A vulnerability was determined in Cudy WR1200EA 2.3.7-20250113-121810. Affected is an unknown function of the file /etc/shadow. Executing ma CVE-2025-95903.5A vulnerability was identified in Weaver E-Mobile Mobile Management Platform up to 20250813. Affected by this vulnerability is an unknown fu CVE-2025-95912.4A security vulnerability has been detected in ZrLog up to 3.1.5. This vulnerability affects unknown code of the file /api/admin/template/con CVE-2025-95929.8A vulnerability was detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report CVE-2025-95939.8A flaw has been found in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/unit_status_info.CVE-2025-95949.8A vulnerability has been found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /rep CVE-2025-95956.1A vulnerability was found in code-projects Student Information Management System 1.0. The impacted element is an unknown function of the fil CVE-2025-95969.8A vulnerability was determined in itsourcecode Sports Management System 1.0. This affects an unknown function of the file /login.php. This m CVE-2025-95979.8A vulnerability was identified in itsourcecode Apartment Management System 1.0. This impacts an unknown function of the file /o_dashboard/re CVE-2025-95989.8A security flaw has been discovered in itsourcecode Apartment Management System 1.0. Affected is an unknown function of the file /setting/ye CVE-2025-95999.8A weakness has been identified in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality o CVE-2025-96009.8A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functiona