CVE-2026-126607

Progressive Robot hMailServer versions 6.2.3 through 6.3.7 on Windows, when used with a MySQL or MariaDB database, are vulnerable to an uncontrolled search path element (CWE-427). The application incorrectly handles the path of its authentication plugins by providing Latin-1 bytes that may be mis...