CVE-2026-124579

A vulnerability exists in aaPanel BillionMail version up to 4.9 within the Relay Configuration API component. The flaw is located in the file core/api/relay/v1/relay.go, where manipulating the helo_name argument can lead to injection . This attack is reachable via the network and may be performed...