CVE-2026-103010 Heap-based Buffer Overflow in hMailServer

Heap-based buffer overflow in the legacy Blowfish decryption routine BlowFishEncryptor::DecryptFromString in Progressive Robot hMailServer 6.0.0 through 6.3.3 on Windows allows a local interactive user with no hMailServer credentials to write bytes of their choosing past the end of a 255-byte hea...

EUVD-2026-94837

Heap-based buffer overflow in the legacy Blowfish decryption routine BlowFishEncryptor::DecryptFromString in Progressive Robot hMailServer 6.0.0 through 6.3.3 on Windows allows a local interactive user with no hMailServer credentials to write bytes of their choosing past the end of a 255-byte hea...

CVE-2026-103010

Progressive Robot hMailServer versions 6.0.0 through 6.3.3 on Windows are vulnerable to a heap-based buffer overflow in the legacy Blowfish decryption routine (BlowFishEncryptor::DecryptFromString ). A local interactive user without credentials can exploit this by passing a long hexadecimal strin...