Openfind vulnerabilities
We track 6 vulnerabilities in Openfind products across 10 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on October 8, 2026.
Latest Openfind vulnerabilities
- 9.8 Critical severity
SecuShare Pro: Improper Neutralization of Special Elements used in an OS Command
The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server.
- 7.5 High severity
MailGates: Improper Neutralization of CRLF Sequences
MailGates/MailAudit developed by Openfind has a CRLF Injection vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read system files.
- 9.8 Critical severity
MailGates: Stack-based Buffer Overflow
MailGates/MailAudit developed by Openfind has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the program's execution flow and execute arbitrary code.
- 9.8 Critical severity
MailGates 5.0: Improper Neutralization of Special Elements used in an OS Command
Openfind's MailGates and MailAudit fail to properly filter user input when analyzing email attachments. An unauthenticated remote attacker can exploit this vulnerability to inject system commands and execute them on the remote server.
- 8.8 High severity
Mail2000 V8.0: Improper Neutralization of Special Elements used in an OS Command
Openfind Mail2000 does not properly filter parameters of specific CGI. Remote attackers with regular privileges can exploit this vulnerability to execute arbitrary system commands on the remote server.
- 7.2 High severity
Mail2000 V7.0: Improper Neutralization of Special Elements used in an OS Command
Openfind Mail2000 does not properly filter parameters of specific API. Remote attackers with administrative privileges can exploit this vulnerability to execute arbitrary system commands on the remote server.