CVE WATCH / VULNERABILITY DETAIL

CVE-2026-107571

HIGHCVSS 7.8NVD feed

Published 19 October 2026 · tracked since 20 October 2026

Description

Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local authenticated user to run code as the mail server's high-privileged accounts when the product is installed in a folder whose permissions are inherited from a writable parent, suc

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools