CVE-2026-6350

CVE-2026-6350 is a critical stack-based buffer overflow vulnerability affecting MailGates and MailAudit products developed by Openfind, permitting unauthenticated remote attackers to achieve arbitrary code execution by compromising the program's execution flow. The vulnerability carries a CVSS score of 9.8 (Critical) with a network-based attack vector requiring no authentication, user interaction, or elevated privileges, resulting in complete compromise of confidentiality, integrity, and availability. Current exploitation activity remains limited, as evidenced by the vulnerability's absence from the Known Exploited Vulnerabilities catalog and relatively low EPSS probability score of 0.000770000, indicating minimal community attention and active exploitation at this time. Organizations operating Openfind mail gateway or audit products should prioritize patching efforts given the critical severity rating and the ease with which remote unauthenticated attackers could achieve system compromise.