CVE-2025-42599CRITICAL 9.8CISA KEVEPSS p88.1%

CVE-2025-42599Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability

Qualitia / Active! Mail

Description

Qualitia Active! Mail contains a stack-based buffer overflow vulnerability that allows a remote, unauthenticated attacker to execute arbitrary or trigger a denial-of-service via a specially crafted request.

Scoring

CVSS 3.19.8 (CRITICAL)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS3.30% probability of exploitation · percentile 88.1% · 2026-10-05T12:00:23Z
Published2025-04-18
Last modified2026-09-24

CISA KEV entry

Added to KEV: 2025-04-28

Underlying weaknesses· 1

CWE-121

References

  1. https://jvn.jp/en/jp/JVN22348866/
  2. https://www.qualitia.com/jp/news/2025/04/18_1030.html
  3. https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-42599

1

TypeTargetConfidenceTier
WeaknessStack-based Buffer Overflowcwe-1210%live

(incoming)1

TypeTargetConfidenceTier
KEVEntryQualitia Active! Mail Stack-Based Buffer Overflow Vulnerabilitykev-cve-2025-425990%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-6350
CVE
CVE-2025-67896
CVE
CVE-2026-5990
CVE
Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
CVE
CVE-2025-7792
CVE
CVE-2025-49697
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.