CVE-2026-32661

Critical

Published: 13/05/2026(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud (SaaS version). A remote attacker can send a specially crafted request to the product's web service, which may lead to arbitrary code execution if the product is configured to run pop3wallpasswd with grdnwww user privilege.

Risk Assessment

This vulnerability may lead to remote code execution, posing a serious threat to the security of the system and the organization's data. Attackers could gain access to sensitive information or take control of the system.

Recommendation

It is recommended to immediately update the software to the latest version to eliminate this vulnerability. Additionally, consider restricting access to the web service and monitoring logs for potential attack attempts.

Original NVD description (English source)

Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud (SaaS version). If a remote attacker sends a specially crafted request to the product's web service, arbitrary code may be executed when the product is configured to run pop3wallpasswd with grdnwww user privilege.