CVE-2020-12782: Openfind Mailaudit

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Openfind MailGates contains a Command Injection flaw, when receiving email with specific strings, malicious code in the mail attachment will be triggered and gain unauthorized access to system files.

Affected products

• Openfind Mailaudit: version 5.0 only
• Openfind Mailgates: version 5.0 only

Published 2020-06-23. Last modified 2026-06-17.