1 matches found
CVE-2026-41319: Improper Neutralization of Special Elements in Output Used by a Downstream Component
MailKit is a cross-platform mail client library built on top of MimeKit. A STARTTLS Response Injection vulnerability in versions prior to 4.16.0 allows a Man-in-the-Middle attacker to inject arbitrary protocol responses across the plaintext-to-TLS trust boundary, enabling SASL authentication...
6.5CVSS6.1AI score0.00331EPSS
SaveExploits1References4
20