CVE-2026-6351: Openfind Mailaudit

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

MailGates/MailAudit developed by Openfind has a CRLF Injection vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read system files.

Affected products

• Openfind Mailaudit: from 6.0, before 6.1.10.054 (fixed in 6.1.10.054); from 5.0, before 5.2.10.099 (fixed in 5.2.10.099)
• Openfind Mailgates: from 6.0, before 6.1.10.054 (fixed in 6.1.10.054); from 5.0, before 5.2.10.099 (fixed in 5.2.10.099)

Published 2026-04-16. Last modified 2026-06-17.