VYPR

Pony Mail

by Pony Mail

CVEs (1)

  • CVE-2026-41873CriApr 28, 2026
    risk 0.64cvss 9.8epss 0.00

    ** UNSUPPORTED WHEN ASSIGNED ** Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Pony Mail leading to admin account takeover. This issue affects all versions of the Lua implementation of Pony Mail. There is a Python…