CVE-2026-6350: Openfind Mailaudit

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

MailGates/MailAudit developed by Openfind has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the program's execution flow and execute arbitrary code.

Affected products

• Openfind Mailaudit: from 6.0, before 6.1.10.054 (fixed in 6.1.10.054); from 5.0, before 5.2.10.099 (fixed in 5.2.10.099)
• Openfind Mailgates: from 6.0, before 6.1.10.054 (fixed in 6.1.10.054); from 5.0, before 5.2.10.099 (fixed in 5.2.10.099)

Published 2026-04-16. Last modified 2026-06-17.