PatchSiren

Optimal Systems CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL Optimal Systems CVE published 2026-01-08

CVE-2025-56425

A critical vulnerability was discovered in the AppConnector component of enaio, allowing authenticated remote attackers to inject arbitrary SMTP commands. This issue affects multiple versions of enaio, including 10.10.0.183 and earlier, 11.0.0.183 and earlier, and 11.10.0.183 and earlier. The vulnerability has a CVSS score of 9.1 and is considered critical. System administrators and security teams should [truncated]