PT-2026-33250 · Mailgates · Mailaudit

Published 2026-04-16 · Updated 2026-04-16 · CVE-2026-6350

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MailGates/MailAudit (affected versions not specified)

Description A stack-based buffer overflow allows unauthenticated remote attackers to control the program execution flow and execute arbitrary code. This issue can be exploited via stack smashing on enterprise mail gateways, which may facilitate lateral movement within a network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2026-6350

Affected Products

Mailaudit

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-6350 · Security Note
• https://twitter.com/0dayPublishing/status/2044610417545052214 · Twitter Post
• https://twcert.org.tw/tw/cp-132-10844-1405d-1.html · Note
• https://twitter.com/CVEnew/status/2044701586354753734 · Twitter Post
• https://twitter.com/OrizonCyber/status/2044664617264193978 · Twitter Post
• https://twcert.org.tw/en/cp-139-10843-9ff91-2.html · Note