CVE-2026-6350: Openfind｜MailGates/MailAudit - Stack-based Buffer Overflow

Published Apr 16, 2026

Updated

MailGates/MailAudit developed by Openfind has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the program's execution flow and execute arbitrary code.

Affected Software

1 affected component

Openfind MailGates/MailAudit

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade MailGates/MailAudit 5.0 to a version that resolves this vulnerability.
Fixed in 5.2.10.099
Upgrade
Upgrade MailGates/MailAudit 6.0 to a version that resolves this vulnerability.
Fixed in 6.1.10.054

Event History

Apr 16, 2026

CVE Published

via MITRE·02:30 AM

Data Sourced

via MITRE·02:30 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·03:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-6350?

CVE-2026-6350 is classified as a critical severity vulnerability due to its potential to allow remote attackers to execute arbitrary code.

How do I fix CVE-2026-6350?

To fix CVE-2026-6350, update to the latest version of Openfind MailGates/MailAudit that addresses the buffer overflow vulnerability.

Who is affected by CVE-2026-6350?

Users of Openfind MailGates/MailAudit are affected by CVE-2026-6350, particularly those with outdated versions.

What type of vulnerability is CVE-2026-6350?

CVE-2026-6350 is a stack-based buffer overflow vulnerability that can lead to control of the program's execution.

Can CVE-2026-6350 be exploited remotely?

Yes, CVE-2026-6350 can be exploited by unauthenticated remote attackers.