CVE-2026-32661

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-32661", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "state": "PUBLISHED", "assignerShortName": "jpcert", "dateReserved": "2026-05-11T00:11:34.095Z", "datePublished": "2026-05-13T05:15:15.435Z", "dateUpdated": "2026-05-13T10:49:48.622Z"}, "containers": {"cna": {"affected": [{"vendor": "Canon Marketing Japan Inc.", "product": "GUARDIANWALL MailSuite (On-premises version)", "versions": [{"version": "Ver 1.4.00 to Ver 2.4.26", "status": "affected"}]}, {"vendor": "Canon Marketing Japan Inc.", "product": "GUARDIANWALL Mail Security Cloud (SaaS version)", "versions": [{"version": "versions before the maintenance on April 30", "status": "affected"}, {"version": "2026", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud (SaaS version). If a remote attacker sends a specially crafted request to the product's web service, arbitrary code may be executed when the product is configured to run pop3wallpasswd with grdnwww user privilege."}], "problemTypes": [{"descriptions": [{"description": "Stack-based buffer overflow", "lang": "en-US", "cweId": "CWE-121", "type": "CWE"}]}], "references": [{"url": "https://security-support.canon-its.jp/info_and_news/show/804?site_domain=GUARDIANWALL"}, {"url": "https://jvn.jp/en/jp/JVN35567473/"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_0": {"version": "3.0", "baseSeverity": "CRITICAL", "baseScore": 9.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}, {"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV4_0": {"version": "4.0", "baseSeverity": "CRITICAL", "baseScore": 9.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2026-05-13T07:24:43.527Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-13T10:44:26.447129Z", "id": "CVE-2026-32661", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-13T10:49:48.622Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-32661", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-05-13T10:44:26.447129Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-13T10:48:17.002Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}, {"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 9.3, "baseSeverity": "CRITICAL", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}], "affected": [{"vendor": "Canon Marketing Japan Inc.", "product": "GUARDIANWALL MailSuite (On-premises version)", "versions": [{"status": "affected", "version": "Ver 1.4.00 to Ver 2.4.26"}]}, {"vendor": "Canon Marketing Japan Inc.", "product": "GUARDIANWALL Mail Security Cloud (SaaS version)", "versions": [{"status": "affected", "version": "versions before the maintenance on April 30"}, {"status": "affected", "version": "2026"}]}], "references": [{"url": "https://security-support.canon-its.jp/info_and_news/show/804?site_domain=GUARDIANWALL"}, {"url": "https://jvn.jp/en/jp/JVN35567473/"}], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud (SaaS version). If a remote attacker sends a specially crafted request to the product's web service, arbitrary code may be executed when the product is configured to run pop3wallpasswd with grdnwww user privilege."}], "problemTypes": [{"descriptions": [{"lang": "en-US", "type": "CWE", "cweId": "CWE-121", "description": "Stack-based buffer overflow"}]}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2026-05-13T07:24:43.527Z"}}}, "cveMetadata": {"cveId": "CVE-2026-32661", "state": "PUBLISHED", "dateUpdated": "2026-05-13T10:49:48.622Z", "dateReserved": "2026-05-11T00:11:34.095Z", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "datePublished": "2026-05-13T05:15:15.435Z", "assignerShortName": "jpcert"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "GUARDIANWALL MailSuite (On-premises version)", "vendor": "Canon Marketing Japan Inc.", "versions": [{"status": "affected", "version": "Ver 1.4.00 to Ver 2.4.26"}]}, {"product": "GUARDIANWALL Mail Security Cloud (SaaS version)", "vendor": "Canon Marketing Japan Inc.", "versions": [{"status": "affected", "version": "versions before the maintenance on April 30"}, {"status": "affected", "version": "2026"}]}], "source": "vultures@jpcert.or.jp"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud (SaaS version). If a remote attacker sends a specially crafted request to the product's web service, arbitrary code may be executed when the product is configured to run pop3wallpasswd with grdnwww user privilege."}, {"lang": "es", "value": "Existe una vulnerabilidad de desbordamiento de b\u00fafer basado en pila en GUARDIANWALL MailSuite y GUARDIANWALL Mail Security Cloud (versi\u00f3n SaaS). Si un atacante remoto env\u00eda una solicitud especialmente dise\u00f1ada al servicio web del producto, se podr\u00eda ejecutar c\u00f3digo arbitrario cuando el producto est\u00e1 configurado para ejecutar pop3wallpasswd con privilegios de usuario grdnwww."}], "id": "CVE-2026-32661", "lastModified": "2026-10-26T14:10:00.130", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "vultures@jpcert.or.jp", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "vultures@jpcert.or.jp", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-32661", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-05-13T10:44:26.447129Z", "version": "2.0.3"}}]}, "published": "2026-05-13T06:16:14.253", "references": [{"source": "vultures@jpcert.or.jp", "url": "https://jvn.jp/en/jp/JVN35567473/"}, {"source": "vultures@jpcert.or.jp", "url": "https://security-support.canon-its.jp/info_and_news/show/804?site_domain=GUARDIANWALL"}], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-121"}], "source": "vultures@jpcert.or.jp", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "versions before the maintenance on April 30"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2026"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "GUARDIANWALL Mail Security Cloud (SaaS version)", "source": "cna", "vendor": "Canon Marketing Japan Inc."}, "product": "guardianwall_mail_security_cloud_(saas_version)", "vendor": "canon_marketing_japan"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.4.00,2.4.26]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "GUARDIANWALL MailSuite (On-premises version)", "source": "cna", "vendor": "Canon Marketing Japan Inc."}, "product": "guardianwall_mailsuite_(on-premises_version)", "vendor": "canon_marketing_japan"}], "created": "2026-05-13T07:30:25.979183+00:00", "title": "Stack Buffer Overflow in GUARDIANWALL MailSuite Web Service Enables Remote Code Execution", "updated": "2026-05-13T10:34:50.154846+00:00", "vendors": ["canon_marketing_japan", "canon_marketing_japan$PRODUCT$guardianwall_mail_security_cloud_(saas_version)", "canon_marketing_japan$PRODUCT$guardianwall_mailsuite_(on-premises_version)"]}