CVE-2022-32272

9.8 criticalEPSS 9.6%

Critical (9.8) in opswat metadefender. EPSS 9.6% chance of exploitation in the next 30 days.

OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5.6.1 have incorrect access control, resulting in privilege escalation.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 9.6% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-269
Published: 2022-06-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

opswat:metadefender

References

http://packetstormsecurity.com/files/171549/OPSWAT-Metadefender-Core-4.21.1-Privilege-Escalation.html
https://docs.opswat.com/mdcore/release-notes
https://docs.opswat.com/mdemail/release-notes
https://docs.opswat.com/mdemail/release-notes/version-5-6-1
https://docs.opswat.com/mdicap/release-notes

Check your stack JSON