PT-2026-40577 · Guardianwall · Mailsite+1

CVE-2026-32661 · Published 2026-05-13 · Updated 2026-05-15

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GUARDIANWALL MailSuite (affected versions not specified) GUARDIANWALL Mail Security Cloud (SaaS version) (affected versions not specified)

Description A stack-based buffer overflow allows a remote attacker to execute arbitrary code by sending a specially crafted request to the web service. This occurs when the product is configured to run pop3wallpasswd with grdnwww user privilege. This issue has been actively exploited and can bypass Endpoint Detection and Response (EDR) systems, which are tools used to monitor and respond to threats on endpoints.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2026-32661

Affected Products

Mail Security Cloud

Mailsite

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-32661 · Security Note
• https://twitter.com/NewsNerdie/status/2054623429219754353 · Twitter Post
• https://t.me/CVEtracker/53618 · Telegram Post
• https://twitter.com/the_yellow_fall/status/2054748783871705561 · Twitter Post
• https://security-support.canon-its.jp/info_and_news/show/804?site_domain=GUARDIANWALL · Note
• https://twitter.com/TuringCyberObs/status/2055223575351562411 · Twitter Post
• https://jvn.jp/en/jp/JVN35567473 · Note