CVE-2026-107582

Inefficient algorithmic complexity in the REST API 6.3.3 through 6.3.5 and the IMAP PREVIEW response 6.2.22 through 6.3.5 of Progressive Robot hMailServer allows a remote unauthenticated attacker to make the webmail, the administration console and the REST API unavailable by sending a message. To...

CVE-2026-107582 Inefficient Algorithmic Complexity in hMailServer

Inefficient algorithmic complexity in the REST API 6.3.3 through 6.3.5 and the IMAP PREVIEW response 6.2.22 through 6.3.5 of Progressive Robot hMailServer allows a remote unauthenticated attacker to make the webmail, the administration console and the REST API unavailable by sending a message. To...

CVE-2026-107582

Progressive Robot hMailServer versions 6.3.3 through 6.3.5 (REST API) and 6.2.22 through 6.3.5 (IMAP PREVIEW) are vulnerable to an inefficient algorithmic complexity flaw. The issue resides in the server's shared string class , where the replace and remove operations run in quadratic time . A rem...

EUVD-2026-94864

Inefficient algorithmic complexity in the REST API 6.3.3 through 6.3.5 and the IMAP PREVIEW response 6.2.22 through 6.3.5 of Progressive Robot hMailServer allows a remote unauthenticated attacker to make the webmail, the administration console and the REST API unavailable by sending a message. To...