CVE-2022-40741

9.8 criticalEPSS 1.3%

Critical (9.8) in softnext mail sqr expert. EPSS 1.3% chance of exploitation in the next 30 days.

Mail SQR Expert’s specific function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to perform arbitrary system command and disrupt service.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2022-10-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

softnext:mail_sqr_expert

References

https://www.twcert.org.tw/tw/cp-132-6643-89bfa-1.html
https://www.twcert.org.tw/tw/cp-132-6643-89bfa-1.html

Check your stack JSON