CVE-2022-40741: Softnext Mail Sqr Expert

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Mail SQR Expert’s specific function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to perform arbitrary system command and disrupt service.

Affected products

  • Softnext Mail Sqr Expert: version 2dut.190301 only

Published 2022-10-31. Last modified 2026-06-17.