A AegiFlow
CRITICALCVSS 9.8KNOWN EXPLOITED

CVE-2025-42599

CVE-2025-42599 updated by NVD

Published
2025-04-28
Modified
2026-11-04
Sources
cisa-kev, nvd

Summary

Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and sent by a remote unauthenticated attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition.

References

Includes data from the CISA Known Exploited Vulnerabilities catalog.

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.