Skip to content
OpenAdvisories
Critical · 10.0 CVE-2025-9588 EUVD-2025-30872GHSA-r4v7-wv7g-7qw4

OS Command Injection in Iron Mountain's enVision

Published Sep 23, 2025 · Updated Jun 5, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Iron Mountain Archiving Services Inc. EnVision allows Command Injection.

This issue affects enVision: before 250563.

Affected products

VendorProductAffectedFixed
Iron Mountain Archiving Services enVision < 250563 250563

References