Critical severity9.8CISA KEVNVD Advisory· Published Apr 18, 2025· Updated Jun 17, 2026

CVE-2025-42599

Description

Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and sent by a remote unauthenticated attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Qualitia/Active\! Mail
cpe:2.3:a:qualitia:active\!_mail:*:*:*:*:*:*:*:*
Range: <6.60.05008562
Active Web Mail/Active Web Mailllm-fuzzy
Range: <=6.60.05008561
Qualitia Co., Ltd./Active! Mail 6v5
Range: BuildInfo: 6.60.05008561 and earlier

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN22348866/nvdThird Party Advisory
www.qualitia.com/jp/news/2025/04/18_1030.htmlnvdVendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.120
patch	0.000
ransomware	0.000