CVE-2026-103011

Published 8 October 2026 · tracked since 8 October 2026

Description

Heap-based buffer overflow in the legacy Blowfish encryption routine (BlowFishEncryptor::Encode, called by EncryptToString) in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows an authenticated mailbox user to cause a denial of service (service crash), and possibly other unspecified impact. I

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-107573 HIGH 7.8
• CVE-2026-107275 MEDIUM 6.8
• CVE-2026-93509 MEDIUM 6.5
• CVE-2026-104660 HIGH 7.8
• CVE-2026-104671 MEDIUM 5.3
• CVE-2026-105190 MEDIUM 5.3
• CVE-2026-103649 HIGH 7.5
• CVE-2026-103010 HIGH 7.8
• CVE-2026-103517 MEDIUM 5.3
• CVE-2026-71183 HIGH 7.1

→ Open the live CVE board · all tools