CVE WATCH / VULNERABILITY DETAIL
CVE-2026-126611
HIGHCVSS 7NVD feed
Published 11 November 2026 · tracked since 12 November 2026
Description
Progressive Robot hMailServer 6.3.4 through 6.3.7, with a MySQL or MariaDB database, TlsMode=verify-full and no TlsCaFile, does not verify the database server's certificate's issuer or name when the connection is one that MariaDB Connector/C treats as local - Server= set to 127.0.0.1, ::1 or localho
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-120151 HIGH 8.8
- CVE-2026-120150 HIGH 8.8
- CVE-2026-120149 HIGH 8.8
- CVE-2026-120147 HIGH 8.8
- CVE-2026-120145 HIGH 8.8
- CVE-2026-120144 HIGH 8.8
- CVE-2026-120143 HIGH 8.8
- CVE-2026-120142 HIGH 8.8
- CVE-2026-120141 HIGH 8.8
- CVE-2026-120139 HIGH 8.8