Progressive Robot Ltd - vulnerabilities (CVEs)

42 CVEs in 1 products, 41 in the last 30 days, newest from 2026-10-21.

Products

• Hmailserver - 42 CVEs

Newest CVEs of Progressive Robot Ltd

• CVE-2026-114490 - CVSS 7.8 (high), 2026-10-21: Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an account assigned the serveradmin role…
• CVE-2026-114489 - CVSS 8.1 (high), 2026-10-21: Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote authenticated user whose…
• CVE-2026-114479 - CVSS 5.8 (medium), 2026-10-21: Not failing securely in the anti-virus attachment-stripping action of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated…
• CVE-2026-114478 - CVSS 5.9 (medium), 2026-10-21: Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated…
• CVE-2026-114477 - CVSS 4.3 (medium), 2026-10-21: Missing authorization in the REST metrics route of Progressive Robot hMailServer 6.2.25 through 6.3.6 allows a remote authenticated user whose credential is…
• CVE-2026-114476 - CVSS 7.5 (high), 2026-10-21: Incorrect authorization in the REST administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user whose…
• CVE-2026-114475 - CVSS 6.5 (medium), 2026-10-21: Missing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user whose…
• CVE-2026-114474 - CVSS 5.9 (medium), 2026-10-21: Use of a less trusted source for the envelope sender in the external-account download of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote…
• CVE-2026-114473 - CVSS 5 (medium), 2026-10-21: Incorrect authorization in the Sender Rewriting Scheme (SRS) of Progressive Robot hMailServer 6.2.1 through 6.3.6 allows a remote attacker to relay mail…
• CVE-2026-114472 - CVSS 3.7 (low), 2026-10-21: Insufficient resource pool in the ACME HTTP-01 challenge responder of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated…
• CVE-2026-114471 - CVSS 4.7 (medium), 2026-10-21: Insertion of sensitive information into a log file in the SMTP server of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a local user who can read…
• CVE-2026-114470 - CVSS 5.3 (medium), 2026-10-21: Cross-site request forgery in the REST API of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote attacker to make an authenticated user's…
• CVE-2026-107571 - CVSS 7.8 (high), 2026-10-19: Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local authenticated user to run code as…
• CVE-2026-107569 - CVSS 7.5 (high), 2026-10-19: Unchecked input for a loop condition in Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to stop the server carrying…
• CVE-2026-107566 - CVSS 6.5 (medium), 2026-10-19: Missing authorization in the Sieve editheader action (6.2.22 through 6.3.6) and in the mail-rule Set header value action (6.0.0 through 6.3.6) of Progressive…
• CVE-2026-107568 - CVSS 6.5 (medium), 2026-10-19: Missing authorization in the Sieve notify action (6.2.22 through 6.3.6) and in the mail-rule Reply action (6.0.0 through 6.3.6) of Progressive Robot…
• CVE-2026-107567 - CVSS 7.5 (high), 2026-10-19: Use of a less trusted source in the DKIM signing of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail…
• CVE-2026-107586 - CVSS 4.3 (medium), 2026-10-08: Uncontrolled eviction in the browser session table of the REST API in Progressive Robot hMailServer 6.2.28 through 6.3.5 allows a remote authenticated user to…
• CVE-2026-107585 - CVSS 5.3 (medium), 2026-10-08: Uncontrolled eviction in the pending sign-in tables of the REST API in Progressive Robot hMailServer 6.3.4 and 6.3.5 allows a remote unauthenticated attacker…
• CVE-2026-107584 - CVSS 7.4 (high), 2026-10-08: Progressive Robot hMailServer 6.0.0 through 6.3.5 fails open when applying DANE (RFC 7672) to outbound SMTP delivery. The server's validating DNSSEC resolver…
• CVE-2026-107583 - CVSS 6.5 (medium), 2026-10-08: Inefficient algorithmic complexity in the webmail's message view of the REST API in Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote…
• CVE-2026-107587 - CVSS 5.9 (medium), 2026-10-08: Improper certificate validation in the webmail of Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote unauthenticated attacker to have…
• CVE-2026-107582 - CVSS 6.5 (medium), 2026-10-08: Inefficient algorithmic complexity in the REST API (6.3.3 through 6.3.5) and the IMAP PREVIEW response (6.2.22 through 6.3.5) of Progressive Robot hMailServer…
• CVE-2026-107581 - CVSS 6.5 (medium), 2026-10-08: Progressive Robot hMailServer 6.0.0 through 6.3.5 processes several IMAP commands from a signed-in account in time quadratic in the command's length or in the…
• CVE-2026-107580 - CVSS 6.5 (medium), 2026-10-08: Inefficient algorithmic complexity in the decoding of message header fields in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows a remote…
• CVE-2026-107579 - CVSS 7.5 (high), 2026-10-08: Inefficient algorithmic complexity in the bounce and complaint processing of Progressive Robot hMailServer 6.3.4 and 6.3.5 allows a remote unauthenticated…
• CVE-2026-107578 - CVSS 6.7 (medium), 2026-10-08: Improper link resolution and external control of file paths in the administrative command-line operations of hMailServer.exe in Progressive Robot hMailServer…
• CVE-2026-107576 - CVSS 7.5 (high), 2026-10-08: Inefficient algorithmic complexity in the inbound DKIM and ARC signature verification of Progressive Robot hMailServer 6.0.0 through 6.3.5 allows a remote…
• CVE-2026-107577 - CVSS 7.5 (high), 2026-10-08: Inefficient algorithmic complexity and a non-terminating loop in the MIME processing of received messages in Progressive Robot hMailServer 6.0.0 through 6.3.5…
• CVE-2026-107575 - CVSS 5.3 (medium), 2026-10-08: Inefficient algorithmic complexity in the SPF macro expansion of Progressive Robot hMailServer 6.3.4 and 6.3.5 allows a remote unauthenticated attacker to…