OPTIMAL SYSTEMS enaio AppConnector security vulnerability

OPTIMAL SYSTEMS enaio AppConnector is an integration middleware from OPTIMAL SYSTEMS, Germany. A security vulnerability exists in OPTIMAL SYSTEMS enaio AppConnector that stems from insufficient input validation and could lead to arbitrary SMTP command injection attacks...

CVE-2025-56425

The AppConnector component in enaio versions 10.10, 11.0, and 11.10 is vulnerable to SMTP command injection due to insufficient input validation. Authenticated remote attackers can exploit this by providing crafted input to the /osrest/api/organization/sendmail endpoint to inject arbitrary SMTP c...

CVE-2025-56425

An issue was discovered in the AppConnector component version 10.10.0.183 and earlier of enaio 10.10, in the AppConnector component version 11.0.0.183 and earlier of enaio 11.0, and in the AppConnctor component version 11.10.0.183 and earlier of enaio 11.10. The vulnerability allows authenticated...