VYPR

hMailServer

by Progressive Robot Ltd

CVEs (1)

  • CVE-2026-100741CriSep 27, 2026
    risk 0.57cvss 9.8epss —

    Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3.3 on Windows, allows a remote, unauthenticated attacker to run arbitrary JScript inside the hMailServer service process, with the privileges of the service…