Security Announcement on CVE-2025-0411

​​We will update this announcement with new details as they emerge from our analysis. Please check back periodically.

Last update: 05 December 2025, 14:00 PM CET

We would like to inform you that a security vulnerability has been published for the third-party component 7zip.

The vulnerability is documented under the reference CVE-2025-0411 and, depending on the usage scenario, could potentially lead to the execution of unauthorized code.

The affected 7zip component is used in products enaio® classify and enaio® classify-pro. enaio® classify and enaio® classify-pro are based on products from Insiders Technologies.

Affected product versions:

• smart FIX 5: Service Packs SP3 to SP10

• smart FIX 6: Service Packs SP0 to SP1

• OmnIA 1: Service Packs SP2 to SP3

Affected components in our product:

• Mail-Importer

• SPL function FILE_ARCHIVE_EXTRACT

Recommended action:

Please update the 7zip component in your installation as described in the Insiders Technologies Help Center.

You can find the relevant articles here:

smart FIX 5 | smart FIX 6| OmnIA 1

A login is required to access the Insiders Technologies Help Center. You can register as a new user to gain direct access to the information. Click on Registrieren in the login window and follow the instructions.

We recommend that all customers and partners implement the above measures immediately to ensure the security and stability of the installation.

If you have any questions or need assistance, please contact the support team of OPTIMAL SYSTEMS as usual.

Further official information on CVE-2025-0411 can be found at the National Institute of Standards and Technology.