cbcvebase.

Apache Software Foundation Pony Mail vulnerabilities

1 known vulnerability affecting apache_software_foundation/pony_mail.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-41873P2CRITICALCVSS 9.8≤ *2026-04-28
CVE-2026-41873 [CRITICAL] CWE-444 CVE-2026-41873: ** UNSUPPORTED WHEN ASSIGNED ** Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response ** UNSUPPORTED WHEN ASSIGNED ** Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Pony Mail leading to admin account takeover. This issue affects all versions of the Lua implementation of Pony Mail. There is a Python implementation under development under the name "Pony Mail Foal" that is not affect
nvd
Apache Software Foundation Pony Mail vulnerabilities | cvebase