Openfind MailGates versions 5.0 and 6.0 contain a stack-based buffer overflow vulnerability (CWE-121) that can be triggered remotely without authentication. This flaw enables attackers to manipulate the program's execution flow, potentially leading to arbitrary code execution. The vulnerability is rated critical with a CVSS 4.0 score of 9.3, reflecting its ease of exploitation and high impact on confidentiality, integrity, and availability. As of the published date, no official fix or patch has been disclosed, and no known exploits have been observed in the wild.

Successful exploitation of this vulnerability allows unauthenticated remote attackers to execute arbitrary code on affected systems, potentially leading to full compromise of the MailGates application and underlying host. The critical CVSS score indicates a severe risk to confidentiality, integrity, and availability. However, there are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should consider applying workarounds if available, restrict network access to the MailGates service, and monitor for unusual activity related to this vulnerability. Avoid exposing affected versions directly to untrusted networks.