HIGHCVE-2026-6351Published Modified CNA twcert
CVE-2026-6351: Openfind｜MailGates/MailAudit - CRLF Injection
MailGates/MailAudit developed by Openfind has a CRLF Injection vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read system files.
Metrics
- CVSS v4.0
- 8.7
- Severity
- HIGH
- Fixed in
- 5.2.10.099
- Affected Products
- 2
Fix available
5.2.10.0996.1.10.054
Affected packages
- Openfind / MailGates< 6.1.10.054 (from 6.0) · < 5.2.10.099 (from 5.0)
- Openfind / MailAudit< 6.1.10.054 (from 6.0) · < 5.2.10.099 (from 5.0)
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:NReferences