This vulnerability involves improper neutralization of special elements used in the template engine of Axway SecureTransport. Specifically, in the mail template feature, an attacker with administrative access can inject Java code that executes server-side when the template is rendered for sending emails. This allows arbitrary code execution on the server, resulting in complete compromise of the host system. The issue affects all versions prior to the 5.5-20260528 update.

Successful exploitation enables an attacker with admin privileges to execute arbitrary Java code on the server hosting Axway SecureTransport. This leads to full host compromise, allowing control over the affected system and potential further attacks within the environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vulnerability affects versions prior to 5.5-20260528, suggesting that updating to 5.5-20260528 or later may remediate the issue. Until official confirmation is available, restrict admin access and monitor for suspicious activity related to template usage.