CVE-2026-103011 Heap-based Buffer Overflow in hMailServer

Heap-based buffer overflow in the legacy Blowfish encryption routine BlowFishEncryptor::Encode, called by EncryptToString in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows an authenticated mailbox user to cause a denial of service service crash, and possibly other unspecified impact. In...

CVE-2026-103011

Progressive Robot hMailServer versions 6.0.0 through 6.3.5 are vulnerable to a heap-based buffer overflow in the legacy Blowfish encryption routine (BlowFishEncryptor::Encode , called by EncryptToString ). The flaw occurs because the padding loop can write up to 7 zero bytes between 2 and 232 byt...

EUVD-2026-94838

Heap-based buffer overflow in the legacy Blowfish encryption routine BlowFishEncryptor::Encode, called by EncryptToString in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows an authenticated mailbox user to cause a denial of service service crash, and possibly other unspecified impact. In...