Remote Denial-of-Service Vulnerability in Sync Breeze and Disk Pulse by Flexense

CVE-2025-59895

What is CVE-2025-59895?

Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 are susceptible to a remote denial-of-service vulnerability linked to inadequate validation of user input during the configuration restore process. Exploitation of this vulnerability could enable malicious actors to submit harmful requests that alter the configuration file. Consequently, this may lead to the application becoming unresponsive, and in certain instances, may require complete reinstallation since the corrupted configuration prevents the service from starting, even when attempts are made to restart it manually.

References