PatchTheCVE: secure mail gatewayhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-6291: WebConsole Cross-Site Scripting in Kaspersky Secure Mail Gateway version 1.1.https://patchthecve.com/cve/CVE-2018-6291.htmlhttps://patchthecve.com/cve/CVE-2018-6291.htmlWed, 17 Jun 2026 02:01:36 +0000MEDIUM 6.1: WebConsole Cross-Site Scripting in Kaspersky Secure Mail Gateway version 1.1.CVE-2018-6290: Local Privilege Escalation in Kaspersky Secure Mail Gateway version 1.1.https://patchthecve.com/cve/CVE-2018-6290.htmlhttps://patchthecve.com/cve/CVE-2018-6290.htmlWed, 17 Jun 2026 02:01:36 +0000HIGH 7.8: Local Privilege Escalation in Kaspersky Secure Mail Gateway version 1.1.CVE-2018-6289: Configuration file injection leading to Code Execution as Root in Kaspersky Secure Mail Gateway version 1.1.https://patchthecve.com/cve/CVE-2018-6289.htmlhttps://patchthecve.com/cve/CVE-2018-6289.htmlWed, 17 Jun 2026 02:01:36 +0000CRITICAL 9.8: Configuration file injection leading to Code Execution as Root in Kaspersky Secure Mail Gateway version 1.1.CVE-2018-6288: Cross-site Request Forgery leading to Administrative account takeover in Kaspersky Secure Mail Gateway versionhttps://patchthecve.com/cve/CVE-2018-6288.htmlhttps://patchthecve.com/cve/CVE-2018-6288.htmlWed, 17 Jun 2026 02:01:36 +0000HIGH 8.8: Cross-site Request Forgery leading to Administrative account takeover in Kaspersky Secure Mail Gateway version 1.1.CVE-2013-6037: Cross-site scripting (XSS) vulnerability in index.php in Aker Secure Mail Gateway 2.5.2 and earlier allows remhttps://patchthecve.com/cve/CVE-2013-6037.htmlhttps://patchthecve.com/cve/CVE-2013-6037.htmlTue, 16 Jun 2026 23:59:55 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in index.php in Aker Secure Mail Gateway 2.5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg_id parameter.