axllent kayıtları
axllent üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-918 Server-Side Request Forgery (SSRF)4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1
- CWE-1385 Missing Origin Validation in WebSockets1
- CWE-770 Allocation of Resources Without Limits or Throttling1
- CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2026-27808İstismar yok | Mailpit is Vulnerable to Server-Side Request Forgery (SSRF) via Link Check APIaxllent · mailpit · CWE-918 | Yüksek8,6 | — | %0,6 | 25 Şub 2026 |
32İzleyin | CVE-2026-45711İstismar yok | Mailpit: Path traversal & arbitrary file write in mailpit dump --http via attacker-controlled message IDsaxllent · mailpit · CWE-22 | Yüksek8,2 | — | %0,4 | 20 Tem 2026 |
30İzleyin | CVE-2026-45713İstismar yok | Mailpit: Unauthenticated remote memory-exhaustion DoS via unlimited SMTP DATA and /api/v1/send body sizesaxllent · mailpit · CWE-400 | Yüksek7,5 | — | %0,6 | 20 Tem 2026 |
30İzleyin | CVE-2026-23845İstismar yok | Mailpit Vulnerable to Server-Side Request Forgery (SSRF) via HTML Check APIaxllent · mailpit · CWE-918 | Yüksek7,5 | — | %0,4 | 19 Oca 2026 |
26İzleyin | CVE-2026-22689İstismar yok | Mailpit is vulnerable to Cross-Site WebSocket Hijacking (CSWSH) allowing unauthenticated access to emailsaxllent · mailpit · CWE-1385 | Orta6,5 | — | %0,2 | 10 Oca 2026 |
23İzleyin | CVE-2026-45712İstismar yok | Mailpit: Concurrent map read & write in proxy CSS rewriter - remote unauth crash (fatal error: concurrent map read and map write)axllent · mailpit · CWE-362 | Orta5,9 | — | %0,3 | 20 Tem 2026 |
23İzleyin | CVE-2026-45709İstismar yok | Mailpit has an incomplete fix for GHSA-6jxm: HTML check still permits SSRF to private/loopback/IMDS via missing IP-filter dialeraxllent · mailpit · CWE-918 | Orta5,8 | — | %0,3 | 20 Tem 2026 |
21İzleyin | CVE-2026-23829Kavram kanıtı | Mailpit has SMTP Header Injection via Regex Bypassaxllent · mailpit · CWE-93 | Orta5,3 | — | %1,4 | 18 Oca 2026 |
21İzleyin | CVE-2026-21859Kavram kanıtı | Mailpit Proxy Endpoint is Vulnerable to Server-Side Request Forgery (SSRF)axllent · mailpit · CWE-918 | Orta5,3 | — | %0,8 | 7 Oca 2026 |
21İzleyin | CVE-2026-48824İstismar yok | Mailpit: Sibling-endpoint memory-exhaustion DoS via unbounded JSON body on /api/v1/messages, /api/v1/tags, and /api/v1/message/{id}/release (incomplete fix of Gaxllent · mailpit · CWE-770 | Orta5,3 | — | %0,5 | 20 Tem 2026 |
- CVE-2026-2780834İzleyin
Mailpit is Vulnerable to Server-Side Request Forgery (SSRF) via Link Check API
YüksekCVSS 8,6İstismar yokEPSS %1axllent · mailpit25 Şub 2026
- CVE-2026-4571132İzleyin
Mailpit: Path traversal & arbitrary file write in mailpit dump --http via attacker-controlled message IDs
YüksekCVSS 8,2İstismar yokEPSS %0axllent · mailpit20 Tem 2026
- CVE-2026-4571330İzleyin
Mailpit: Unauthenticated remote memory-exhaustion DoS via unlimited SMTP DATA and /api/v1/send body sizes
YüksekCVSS 7,5İstismar yokEPSS %1axllent · mailpit20 Tem 2026
- CVE-2026-2384530İzleyin
Mailpit Vulnerable to Server-Side Request Forgery (SSRF) via HTML Check API
YüksekCVSS 7,5İstismar yokEPSS %0axllent · mailpit19 Oca 2026
- CVE-2026-2268926İzleyin
Mailpit is vulnerable to Cross-Site WebSocket Hijacking (CSWSH) allowing unauthenticated access to emails
OrtaCVSS 6,5İstismar yokEPSS %0axllent · mailpit10 Oca 2026
- CVE-2026-4571223İzleyin
Mailpit: Concurrent map read & write in proxy CSS rewriter - remote unauth crash (fatal error: concurrent map read and map write)
OrtaCVSS 5,9İstismar yokEPSS %0axllent · mailpit20 Tem 2026
- CVE-2026-4570923İzleyin
Mailpit has an incomplete fix for GHSA-6jxm: HTML check still permits SSRF to private/loopback/IMDS via missing IP-filter dialer
OrtaCVSS 5,8İstismar yokEPSS %0axllent · mailpit20 Tem 2026
- CVE-2026-2382921İzleyin
Mailpit has SMTP Header Injection via Regex Bypass
OrtaCVSS 5,3Kavram kanıtıEPSS %1axllent · mailpit18 Oca 2026
- CVE-2026-2185921İzleyin
Mailpit Proxy Endpoint is Vulnerable to Server-Side Request Forgery (SSRF)
OrtaCVSS 5,3Kavram kanıtıEPSS %1axllent · mailpit7 Oca 2026
- CVE-2026-4882421İzleyin
Mailpit: Sibling-endpoint memory-exhaustion DoS via unbounded JSON body on /api/v1/messages, /api/v1/tags, and /api/v1/message/{id}/release (incomplete fix of G
OrtaCVSS 5,3İstismar yokEPSS %1axllent · mailpit20 Tem 2026