CVE-2026-41113

CVE-2026-41113

CVSS 8.1 HIGHEPSS 0.9%CWE-78

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 8.1EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

16 abr 2026Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

sagredo qmail before 2026.04.07 allows tls_quit remote code execution because of popen in notlshosts_auto in qmail-remote.c.

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Productos afectados

sagredo · qmail

Referencias

https://blog.calif.io/p/we-asked-claude-to-audit-sagredos https://github.com/califio/publications/tree/main/MADBugs/qmail https://github.com/sagredo-dev/qmail/commit/749f607f6885e3d01b36f2647d7a1db88f1ef741 https://github.com/sagredo-dev/qmail/pull/42 https://github.com/sagredo-dev/qmail/releases/tag/v2026.04.07 http://www.openwall.com/lists/oss-security/2026/04/18/5