Dashboard / CVE-2025-42599

CVE-2025-42599

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 1/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Qualitia Active! Mail contains a stack-based buffer overflow vulnerability that allows a remote, unauthenticated attacker to execute arbitrary or trigger a denial-of-service via a specially crafted request.

CISA Known Exploited Vulnerability

Vendor / Product Qualitia — Active! Mail
Date Added 2025-04-28
Remediation Due 2025-05-19
https://www.qualitia.com/jp/news/2025/04/18_1030.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-42599

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
qualitia active\!_mail < 6.60.05008562

References & Advisories (3)

https://jvn.jp/en/jp/JVN22348866/
Third Party Advisory

Bug Bounty Relevance

1 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

3.36%
Raw Score 0.033550
Percentile 88.7%
Date 2026-10-28

Intelligence Sources

kev ref →

External Links