CVE-2025-40605

Medium · 5.3

CVSS

5.3

EPSS

0.4%

Published

Nov 20, 2025

CISA due date

—

The record

A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences (such as ../) and may access files and directories outside the intended restricted path.

Affected packages

Ecosystem	Package	Introduced	Fixed