CVE-2025-42599

CVE-2025-42599 is a critical stack-based buffer overflow vulnerability affecting Qualitia Active! mail 6 BuildInfo: 6.60.05008561 and earlier. This flaw allows a remote, unauthenticated attacker to achieve arbitrary code execution or a denial-of-service condition by sending a specially crafted request. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. The vulnerability is actively exploited in the wild, as confirmed by its presence in CISA's KEV catalog and recent media coverage, despite a lack of public exploit intelligence in Metasploit, Nuclei, or ExploitDB. The high level of community discussion further underscores its significance.