OS Command Injection Vulnerability in Iron Mountain EnVision Software
CVE-2025-9588
10CRITICAL
Key Information:
- Status
- Vendor
- CVE Published:
- 23 September 2025
What is CVE-2025-9588?
An OS Command Injection vulnerability has been identified in Iron Mountain's EnVision software, allowing attackers to execute arbitrary commands on the host system. This vulnerability affects all versions of EnVision prior to 250563, potentially leading to unauthorized access and control over system resources. It is crucial for users to assess their systems and apply the necessary patches or updates to mitigate this risk and enhance overall cybersecurity.
Affected Version(s)
enVision 0 < 250563