CVE-2026-121452

The bbs-go software (versions through 4.4.6 ) is vulnerable to an improper TLS certificate validation flaw within its SMTP email service. The root cause is located in the sendEmail() function, which sets InsecureSkipVerify to true. This allows network-positioned attackers to intercept SMTP traffi...