CVE-2026-6350 CRITICAL

CVE-2026-6350: Openfind｜MailGates/MailAudit - Stack-based Buffer Overflow

Vendor Openfind

Product MailGates

Weakness CWE-121

Published April 16, 2026

Last update April 16, 2026

View on NVD All CVEs

CVSS base score

9.3/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

MailGates/MailAudit developed by Openfind has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the program's execution flow and execute arbitrary code.

Key dates

02Disclosure timeline

April 16, 2026 CVE published

April 16, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-6350 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/121.html

Related vulnerabilities

Identifiers

CVE CVE-2026-6350

CWE CWE-121

CVSS 9.3 / CRITICAL

Affected versions

Vendor Openfind

Product MailGates

Affected ≥ 6.0 and < 6.1.10.054

Vendor Openfind

Product MailGates

Affected ≥ 5.0 and < 5.2.10.099

Vendor Openfind

Product MailAudit

Affected ≥ 6.0 and < 6.1.10.054

Vendor Openfind

Product MailAudit

Affected ≥ 5.0 and < 5.2.10.099

CVE-2026-6350: Openfind｜MailGates/MailAudit - Stack-based Buffer Overflow

01Description

02Disclosure timeline

03References

04Related CVE