cve-2026-32661

{
  "cvss": 9.3,
  "datePublished": "2026-05-13T06:16:14.253",
  "dateUpdated": "2026-10-26T14:10:00.130",
  "description": "Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud (SaaS version). If a remote attacker sends a specially crafted request to the product's web service, arbitrary code may be executed when the product is configured to run pop3wallpasswd with grdnwww user privilege.",
  "id": "CVE-2026-32661",
  "raw": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "GUARDIANWALL MailSuite (On-premises version)",
            "vendor": "Canon Marketing Japan Inc.",
            "versions": [
              {
                "status": "affected",
                "version": "Ver 1.4.00 to Ver 2.4.26"
              }
            ]
          },
          {
            "product": "GUARDIANWALL Mail Security Cloud (SaaS version)",
            "vendor": "Canon Marketing Japan Inc.",
            "versions": [
              {
                "status": "affected",
                "version": "versions before the maintenance on April 30"
              },
              {
                "status": "affected",
                "version": "2026"
              }
            ]
          }
        ],
        "source": "vultures@jpcert.or.jp"
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud (SaaS version). If a remote attacker sends a specially crafted request to the product's web service, arbitrary code may be executed when the product is configured to run pop3wallpasswd with grdnwww user privilege."
      },
      {
        "lang": "es",
        "value": "Existe una vulnerabilidad de desbordamiento de búfer basado en pila en GUARDIANWALL MailSuite y GUARDIANWALL Mail Security Cloud (versión SaaS). Si un atacante remoto envía una solicitud especialmente diseñada al servicio web del producto, se podría ejecutar código arbitrario cuando el producto está configurado para ejecutar pop3wallpasswd con privilegios de usuario grdnwww."
      }
    ],
    "id": "CVE-2026-32661",
    "lastModified": "2026-10-26T14:10:00.130",
    "metrics": {
      "cvssMetricV30": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9,
          "source": "vultures@jpcert.or.jp",
          "type": "Secondary"
        }
      ],
      "cvssMetricV40": [
        {
          "cvssData": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "confidentialityRequirement": "NOT_DEFINED",
            "exploitMaturity": "NOT_DEFINED",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "NOT_DEFINED",
            "modifiedAttackRequirements": "NOT_DEFINED",
            "modifiedAttackVector": "NOT_DEFINED",
            "modifiedPrivilegesRequired": "NOT_DEFINED",
            "modifiedSubAvailabilityImpact": "NOT_DEFINED",
            "modifiedSubConfidentialityImpact": "NOT_DEFINED",
            "modifiedSubIntegrityImpact": "NOT_DEFINED",
            "modifiedUserInteraction": "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
            "modifiedVulnIntegrityImpact": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "source": "vultures@jpcert.or.jp",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2026-32661",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-05-13T10:44:26.447129Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-05-13T06:16:14.253",
    "references": [
      {
        "source": "vultures@jpcert.or.jp",
        "url": "https://jvn.jp/en/jp/JVN35567473/"
      },
      {
        "source": "vultures@jpcert.or.jp",
        "url": "https://security-support.canon-its.jp/info_and_news/show/804?site_domain=GUARDIANWALL"
      }
    ],
    "sourceIdentifier": "vultures@jpcert.or.jp",
    "vulnStatus": "Deferred",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-121"
          }
        ],
        "source": "vultures@jpcert.or.jp",
        "type": "Secondary"
      }
    ]
  },
  "severity": "CRITICAL",
  "source": "nvd",
  "title": "Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud (SaaS..."
}