by Kastro
Paper/Archive/CVE-2026-32661

CVE-2026-32661

Canon Marketing Japan Inc. GUARDIANWALL MailSuite (On-premises version) — Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud (SaaS version).

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 40.8.408 × 208.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud (SaaS version). If a remote attacker sends a specially crafted request to the product's web service, arbitrary code may be executed when the product is configured to run pop3wallpasswd with grdnwww user privilege.

Affected

ProductAffectedFixed inSource
GUARDIANWALL MailSuite (On-premises version)Ver 1.4.00 to Ver 2.4.26–CNA
GUARDIANWALL Mail Security Cloud (SaaS version)versions before the maintenance on April 30–CNA
GUARDIANWALL Mail Security Cloud (SaaS version)2026–CNA

Scores by source

jpcert (CNA)9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
jpcert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsecurity-support.canon-its.jp/info_and_news/show/804?site_domain=GUARDIANWALLrefjvn.jp/en/jp/JVN35567473