Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and sent by a remote unauthenticated attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2025-05-19. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
類推でパッと思いつくのはあのIIJ セキュアMXサービスへの不正アクセスでたださすがに関連なさそう、と↓の記事 Active! mailの脆弱性「CVE-2025-42599」を考察 | トレンドマイクロ (JP) https://www.trendmicro.com/ja_jp/jp-security/25/d/trendnews-20250422-01.html
Post summary
The post merely references a Trend Micro article about CVE‑2025‑42599, offering no concrete information on PoC, exploits, active use, patches, technical specifics, or debunking.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | qualitia | active\!_mail | - | - | - |