CVE-2026-6351

HighCVSS 7.5

Published: 16/04/2026(UTC)Updated: 26/10/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.59%

48th percentile - higher than 48% of all known CVEs

Summary

MailGates/MailAudit developed by Openfind has a CRLF Injection vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read system files.

Risk Assessment

Attackers may gain access to sensitive information stored in system files, potentially leading to serious security breaches.

Recommendation

It is recommended to update MailGates/MailAudit to the latest version and implement appropriate security measures to minimize the risk of attacks.

Other vulnerabilities in MailGates/MailAudit

CVE-2026-6350Critical
MailGates/MailAudit developed by Openfind has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the program's execution flow and execute arbitrary code.

Original NVD description (English source)

MailGates/MailAudit developed by Openfind has a CRLF Injection vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read system files.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS