Vulnerability · Published Jan 28, 2026 · Assigned by INCIBE
CVE-2025-59895Remote denial-of-service (DoS) vulnerability in Sync Breeze Enterprise Server
High 8.2
In plain English
A high-severity improper input validation in Disk Pulse Enterprise from Flexense. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).
Official description
Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a remote denial-of-service (DoS) vulnerability in the configuration restore functionality. The issue is due to insufficient validation of user-supplied data during this process. An attacker could send malicious requests to alter the configuration file, causing the application to become unresponsive. In a successful scenario, the service may not recover on its own and require a complete reinstallation, as the configuration becomes corrupted and prevents the service from restarting, even manually.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Flexense | Sync Breeze Enterprise Server | v10.4.18 |
| Flexense | Disk Pulse Enterprise | v10.4.18 |
Weakness: CWE-20 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N