Softnext sn os vulnerabilities

Latest Softnext sn os CVEs

Newest publication first

1. CVE-2024-5670 Softnext Mail SQR Expert and Mail Archiving Expert - OS Command Injection

   Published 2024-07-29

   Critical·CVSS 9.8 EPSS 0.90%

   The web services of Softnext's products, Mail SQR Expert and Mail Archiving Expert do not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the remote server.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.