PT-2026-33251 · Openfind · Mailaudit

Published 2026-04-16 · Updated 2026-04-16 · CVE-2026-6351

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MailGates/MailAudit (affected versions not specified)

Description MailGates/MailAudit developed by Openfind contains a CRLF injection flaw. This allows unauthenticated remote attackers to read system files. CRLF injection occurs when an application fails to sanitize carriage return and line feed characters, allowing an attacker to inject new lines into a protocol stream.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-93

Related Identifiers

CVE-2026-6351

Affected Products

Mailaudit

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-6351 · Security Note
• https://twcert.org.tw/tw/cp-132-10844-1405d-1.html · Note
• https://twcert.org.tw/en/cp-139-10843-9ff91-2.html · Note
• https://twitter.com/CVEnew/status/2044701583964037270 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2044802258966106240 · Twitter Post