Is CVE-2025-42599 exploited in the wild?

Yes. CVE-2025-42599 is known to be exploited in the wild, first recorded on 28 April 2025. Treat it as urgent.

How severe is CVE-2025-42599?

Critical severity, with a CVSS score of 9.8, published 28 April 2025.

Which products and versions are affected?

Qualitia Active! mail 6 BuildInfo: 6.60.05008561 and earlier.

Is there a fix for CVE-2025-42599?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2025-42599 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2025-42599?

Check whether you run Qualitia Active!mail. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-42599: Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability

CVE-2025-42599 · Severity: critical · CVSS 9.8 · Exploited in the wild · Published 2025-04-28

Qualitia Active! mail 6 contains a stack-based buffer overflow vulnerability (CWE-121) due to improper handling of specially crafted requests. A remote, unauthenticated attacker can exploit this to execute arbitrary code or cause a denial-of-service (DoS) condition.

Quick answers

Is CVE-2025-42599 exploited in the wild?: Yes. CVE-2025-42599 is known to be exploited in the wild, first recorded on 28 April 2025. Treat it as urgent.
How severe is CVE-2025-42599?: Critical severity, with a CVSS score of 9.8, published 28 April 2025.
Which products and versions are affected?: Qualitia Active! mail 6 BuildInfo: 6.60.05008561 and earlier.
Is there a fix for CVE-2025-42599?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-42599 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2025-42599?: Check whether you run Qualitia Active!mail. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Affected products

Qualitia Active! mail 6 BuildInfo: 6.60.05008561 and earlier

Timeline

2025-04-18: disclosed: Initial disclosure by JPCERT/CC and vendor advisory published.
2025-04-28: kev added: Added to CISA Known Exploited Vulnerabilities (KEV) catalog.

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.