CVE-2026-126610

Progressive Robot hMailServer versions 6.3.4 through 6.3.7 are vulnerable to improper certificate validation when using a MySQL or MariaDB database with TlsMode=verify-full. The root cause is that the server fails to provide the correct CA file to the database client if the TlsCaFile filename con...