[New Template] CVE-2026-6350: Openfind MailGates/MailAudit Stack Buffer Overflow RCE

[eyangfeng88-arch]

Template Information

CVE ID: CVE-2026-6350
CVSS Score: 9.8 (Critical)
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-121 (Stack-based Buffer Overflow)

Vulnerability Description

A stack-based buffer overflow vulnerability exists in Openfind MailGates and MailAudit products. An unauthenticated remote attacker can exploit this vulnerability via network-facing input handlers, causing a buffer overflow that allows manipulation of program execution flow and corruption of critical control flow data (return addresses), leading to Remote Code Execution.

Affected Software

• Product: Openfind MailGates / MailAudit

Detection Methods

• Product fingerprinting via common endpoints
• Version detection via specific version endpoints
• Banner grabbing via HTTP response headers
• JavaScript/CSS resource fingerprinting

References

• https://nvd.nist.gov/vuln/detail/CVE-2026-6350

[neo-by-projectdiscovery-dev]

Neo - Nuclei Template Review

No security issues found

Hardening Notes

• The template has a YAML syntax error (duplicate 'matchers:' key at lines 39 and 76) that will cause parsing failure - this is a quality issue, not a security vulnerability
• Template is placed in http/vulnerabilities/ but should follow repository convention of http/cves/2026/ for CVE templates
• Template lacks metadata fields (max-request, verified, vendor, product) that are standard in this repository
• Template is detection-only and does not verify the actual buffer overflow vulnerability - it only fingerprints the product

_{Comment @pdneo help for available commands. · Open in Neo}