Tencent Enterprise Mail: undisclosed vulnerability (ZAI-2026-NCEV8A)

Not disclosed. Details are not yet publicly disclosed...

GMX Mail: undisclosed vulnerability (ZAI-2026-NWFGM2)

Not disclosed. Details are not yet publicly disclosed...

AOL Mail: undisclosed vulnerability (ZAI-2026-ZGCKIQ)

Not disclosed. Details are not yet publicly disclosed...

WPS Mail: undisclosed vulnerability (ZAI-2026-S2G6BW)

Not disclosed. Details are not yet publicly disclosed...

Daum Mail: undisclosed vulnerability (ZAI-2026-VS9FBH)

Not disclosed. Details are not yet publicly disclosed...

NetEase Enterprise Mail: undisclosed vulnerability (ZAI-2026-0GONT7)

Not disclosed. Details are not yet publicly disclosed...

Sohu Mail: undisclosed vulnerability (ZAI-2026-1Y53BA)

Not disclosed. Details are not yet publicly disclosed...

Zoho Mail: undisclosed vulnerability (ZAI-2026-JI549Z)

Not disclosed. Details are not yet publicly disclosed...

Zoho Mail: undisclosed vulnerability (ZAI-2026-WVMAA6)

Not disclosed. Details are not yet publicly disclosed...

PT-2026-28365

Name of the Vulnerable Software and Affected Versions Dovecot versions prior to 2.4.3 Description Sending a "NOOP ..." command with a large number of parentheses e.g., 4000 open and close can lead to excessive memory consumption, approximately 1MB per command. Prolonged use of this technique, by...

PT-2026-28367

Name of the Vulnerable Software and Affected Versions Dovecot versions prior to 2.4.3-1.1 Description A mail message with a large number of RFC 2231 MIME parameters can cause excessive CPU usage in LMTP. A specially crafted message can lead to significant CPU time consumption during mail delivery...

QQ Mail: undisclosed vulnerability (ZAI-2026-2FWFM1)

Not disclosed. Details are not yet publicly disclosed...

iCloud Mail: undisclosed vulnerability (ZAI-2026-M7G7R7)

Not disclosed. Details are not yet publicly disclosed...

Yahoo Mail: undisclosed vulnerability (ZAI-2026-9I8QZX)

Not disclosed. Details are not yet publicly disclosed...

CVE-2025-49028

Cross-Site Request Forgery CSRF vulnerability in Zoho Mail Zoho ZeptoMail transmail allows Stored XSS.This issue affects Zoho ZeptoMail: from n/a through = 3.3.1...

Exploit for CVE-2025-52691

CVE-2025-52691 PoC: SmarterMail Arbitrary File Upload RCE APT...

CVE-2025-52691

Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution...

CVE-2025-52691

Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution...

CVE-2025-52691

Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution...

CVE-2025-52691 Upload Arbitrary Files

Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution...