| TVN ID | TVN-202604003 |
|---|---|
| CVE ID | CVE-2026-6350, CVE-2026-6351 |
| CVSS | CVE-2026-6350： 9.8 (Critical) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-6351： 7.5 (High) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| Affected Products | MailGates/MailAudit 6.0： Before version 6.1.10.054 MailGates/MailAudit 5.0： Before version 5.2.10.099 |
| Description | CVE-2026-6350(Stack-based Buffer Overflow)： Unauthenticated remote attackers can control the program's execution flow and execute arbitrary code. CVE-2026-6351(CRLF Injection)： Unauthenticated remote attackers can exploit this vulnerability to read system files. |
| Solution | MailGates/MailAudit 6.0： Update to version 6.1.10.054 or later MailGates/MailAudit 5.0： Update to version 5.2.10.099 or later |
| Credit | Openfind Tech Team |
| Public Date | 2026-04-16 |
:::