CVE-2026-32661
Last modified
CVE-2026-32661 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud (SaaS version). If a remote attacker sends a specially crafted request to the product's web service, arbitrary code may be executed when the product is configured to run pop3wallpasswd with grdnwww user privilege.. EPSS estimates a 0.47% chance of exploitation in the next 30 days.
Description
Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud (SaaS version). If a remote attacker sends a specially crafted request to the product's web service, arbitrary code may be executed when the product is configured to run pop3wallpasswd with grdnwww user privilege.
Metrics
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-32661?
How severe is CVE-2026-32661?
How do I fix CVE-2026-32661?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-32650Anviz CrossChex Standard is vulnerable when an attacker mani…7.5
- CVE-2026-32652Dell AIOps Collector versions prior to 1.18.3 contain a "Use…7.8
- CVE-2026-32655Dell Alienware Command Center (AWCC), versions prior to 6.13…7.8
- CVE-2026-32657Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0,…7.3
- CVE-2026-32658Dell Automation Platform versions prior to 2.0.0.0, contains…8.8
- CVE-2026-3266Missing Authorization vulnerability in OpenText™ Filr allows…9.8
- CVE-2026-32662Development and test API endpoints are present that mirror p…6.9
- CVE-2026-32663The WebSocket backend uses charging station identifiers to u…6.5
- CVE-2026-32665In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, whe…7.5
- CVE-2026-32666WebCTRL systems that communicate over BACnet inherit the pro…7.5
- CVE-2026-32669Code injection vulnerability exists in BUFFALO Wi-Fi router …9.8
- CVE-2026-32673A vulnerability exists in BIG-IP scripted monitors that may …8.7
Are you affected by CVE-2026-32661?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST