MailGates and MailAudit, developed by Openfind, contain a stack-based buffer overflow that permits unauthenticated remote attackers to hijack program execution and run arbitrary code. The flaw results in a compromise of confidentiality, integrity, and availability for any system hosting the vulnerable component, as attacker‑controlled code can be executed with the privileges of the running process.

The vulnerability affects Openfind's MailAudit and MailGates products. For installations on version 6.0, a patch is available in version 6.1.10.054 or newer. For installations on version 5.0, the fix resides in version 5.2.10.099 or newer.

With a CVSS score of 9.3 the flaw is classified as critical. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog, indicating no known active exploitation campaigns. Nevertheless, the unauthenticated remote attack surface means that an attacker can exploit the issue without prior credentials, making timely remediation imperative.