CVE-2026-103010 | Progressive Robot hMailServer up to 6.3.3 Blowfish Decryption Routine DecryptFromString heap-based overflow

October 8, 2026 Yanac

A vulnerability marked as critical has been reported in Progressive Robot hMailServer up to 6.3.3. Impacted is the function BlowFishEncryptor::DecryptFromString of the component Blowfish Decryption Routine. This manipulation causes heap-based buffer overflow.

This vulnerability is handled as CVE-2026-103010. It is possible to launch the attack on the local host. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More