VIR Vulnerability Intelligence Relay

CVE-2025-42599

unknown KEV
Published 2025-04-28 · Modified 2025-04-28
CVSS v3
—
CVSS v2
—
VIR risk
1.5

Description

Qualitia Active! Mail contains a stack-based buffer overflow vulnerability that allows a remote, unauthenticated attacker to execute arbitrary or trigger a denial-of-service via a specially crafted request.

CISA KEV

Vendor
Qualitia
Product
Active! Mail
Due date
2025-05-19

Predictions

Exploit likelihood
99%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cisa-kev — https://www.qualitia.com/jp/news/2025/04/18_1030.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-42599

Exploits

References

Verify integrity in audit chain (admin only). AS-IS.