Openfind vulnerabilities
Published CVEs affecting Openfind products: 3 record(s), with severity, exploitation and fixes.
CVE-2026-107459
Critical · 9.8
CWE-78 Oct 8, 2026
Openfind｜SecuShare Pro - OS Command Injection
The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server.
CVE-2026-6351
High · 7.5
CWE-93 Apr 16, 2026
Openfind｜MailGates/MailAudit - CRLF Injection
MailGates/MailAudit developed by Openfind has a CRLF Injection vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read system files.
CVE-2026-6350
Critical · 9.8
CWE-121 Apr 16, 2026
Openfind MailGates/MailAudit Stack-based Buffer Overflow
MailGates/MailAudit developed by Openfind has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the program's execution flow and execute arbitrary code.