Advisories · Technology

Progressive Robot Ltd hMailServer.

Every CVE that names Progressive Robot Ltd hMailServer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-114490 CVE record

CVSS 7.8 High

Incorrect Authorization in hMailServer
- Progressive Robot Ltd hMailServer
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-114489 CVE record

CVSS 8.1 High

Missing Authorization in hMailServer
- Progressive Robot Ltd hMailServer
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-114479 CVE record

CVSS 5.8 Medium

Not Failing Securely ('Failing Open') in hMailServer
- Progressive Robot Ltd hMailServer
- CWE-636
Not analysed yet 21 Oct 2026
CVE-2026-114478 CVE record

CVSS 5.9 Medium

Unintended Proxy or Intermediary ('Confused Deputy') in hMailServer
- Progressive Robot Ltd hMailServer
- CWE-441
Not analysed yet 21 Oct 2026
CVE-2026-114477 CVE record

CVSS 4.3 Medium

Missing Authorization in hMailServer
- Progressive Robot Ltd hMailServer
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-114476 CVE record

CVSS 7.5 High

Incorrect Authorization in hMailServer
- Progressive Robot Ltd hMailServer
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-114475 CVE record

CVSS 6.5 Medium

Missing Authorization in hMailServer
- Progressive Robot Ltd hMailServer
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-114474 CVE record

CVSS 5.9 Medium

Use of Less Trusted Source in hMailServer
- Progressive Robot Ltd hMailServer
- CWE-348
Not analysed yet 21 Oct 2026
CVE-2026-114473 CVE record

CVSS 5.0 Medium

Incorrect Authorization in hMailServer
- Progressive Robot Ltd hMailServer
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-114472 CVE record

CVSS 3.7 Low

Insufficient Resource Pool in hMailServer
- Progressive Robot Ltd hMailServer
- CWE-410
Not analysed yet 21 Oct 2026
CVE-2026-114471 CVE record

CVSS 4.7 Medium

Insertion of Sensitive Information into Log File in hMailServer
- Progressive Robot Ltd hMailServer
- Information disclosure
Not analysed yet 21 Oct 2026
CVE-2026-114470 CVE record

CVSS 5.3 Medium

Cross-Site Request Forgery (CSRF) in hMailServer
- Progressive Robot Ltd hMailServer
- Cross-site request forgery (CSRF)
Not analysed yet 21 Oct 2026
CVE-2026-107571 CVE record

CVSS 7.8 High

Incorrect Default Permissions in hMailServer
- Progressive Robot Ltd hMailServer
- Broken access control
Not analysed yet 19 Oct 2026
CVE-2026-107569 CVE record

CVSS 7.5 High

Unchecked Input for Loop Condition in hMailServer
- Progressive Robot Ltd hMailServer
- CWE-606
Not analysed yet 19 Oct 2026
CVE-2026-107566 CVE record

CVSS 6.5 Medium

Missing Authorization in hMailServer
- Progressive Robot Ltd hMailServer
- Broken access control
Not analysed yet 19 Oct 2026
CVE-2026-107568 CVE record

CVSS 6.5 Medium

Missing Authorization in hMailServer
- Progressive Robot Ltd hMailServer
- Broken access control
Not analysed yet 19 Oct 2026
CVE-2026-107567 CVE record

CVSS 7.5 High

Use of Less Trusted Source in hMailServer
- Progressive Robot Ltd hMailServer
- CWE-348
Not analysed yet 19 Oct 2026
CVE-2026-107586 CVE record

CVSS 4.3 Medium

Allocation of Resources Without Limits or Throttling in hMailServer
- Progressive Robot Ltd hMailServer
- Denial of service
Not analysed yet 8 Oct 2026
CVE-2026-107585 CVE record

CVSS 5.3 Medium

Allocation of Resources Without Limits or Throttling in hMailServer
- Progressive Robot Ltd hMailServer
- Denial of service
Not analysed yet 8 Oct 2026
CVE-2026-107584 CVE record

CVSS 7.4 High

Not Failing Securely ('Failing Open') in hMailServer
- Progressive Robot Ltd hMailServer
- CWE-636
Not analysed yet 8 Oct 2026
CVE-2026-107583 CVE record

CVSS 6.5 Medium

Inefficient Algorithmic Complexity in hMailServer
- Progressive Robot Ltd hMailServer
- Denial of service
Not analysed yet 8 Oct 2026
CVE-2026-107587 CVE record

CVSS 5.9 Medium

Improper Certificate Validation in hMailServer
- Progressive Robot Ltd hMailServer
- Weak cryptography or TLS
Not analysed yet 8 Oct 2026
CVE-2026-107582 CVE record

CVSS 6.5 Medium

Inefficient Algorithmic Complexity in hMailServer
- Progressive Robot Ltd hMailServer
- Denial of service
Not analysed yet 8 Oct 2026
CVE-2026-107581 CVE record

CVSS 6.5 Medium

Inefficient Algorithmic Complexity in hMailServer
- Progressive Robot Ltd hMailServer
- Denial of service
Not analysed yet 8 Oct 2026
CVE-2026-107580 CVE record

CVSS 6.5 Medium

Inefficient Algorithmic Complexity in hMailServer
- Progressive Robot Ltd hMailServer
- Denial of service
Not analysed yet 8 Oct 2026
CVE-2026-107579 CVE record

CVSS 7.5 High

Inefficient Algorithmic Complexity in hMailServer
- Progressive Robot Ltd hMailServer
- Denial of service
Not analysed yet 8 Oct 2026
CVE-2026-107578 CVE record

CVSS 6.7 Medium

Improper Link Resolution Before File Access ('Link Following') in hMailServer
- Progressive Robot Ltd hMailServer
- Path traversal
Not analysed yet 8 Oct 2026
CVE-2026-107576 CVE record

CVSS 7.5 High

Inefficient Algorithmic Complexity in hMailServer
- Progressive Robot Ltd hMailServer
- Denial of service
Not analysed yet 8 Oct 2026
CVE-2026-107577 CVE record

CVSS 7.5 High

Loop with Unreachable Exit Condition ('Infinite Loop') in hMailServer
- Progressive Robot Ltd hMailServer
- Denial of service
Not analysed yet 8 Oct 2026
CVE-2026-107575 CVE record

CVSS 5.3 Medium

Inefficient Algorithmic Complexity in hMailServer
- Progressive Robot Ltd hMailServer
- Denial of service
Not analysed yet 8 Oct 2026
CVE-2026-107572 CVE record

CVSS 6.5 Medium

Inefficient Regular Expression Complexity in hMailServer
- Progressive Robot Ltd hMailServer
- Denial of service
Not analysed yet 8 Oct 2026
CVE-2026-107573 CVE record

CVSS 7.8 High

Incorrect Default Permissions in hMailServer
- Progressive Robot Ltd hMailServer
- Broken access control
Not analysed yet 8 Oct 2026
CVE-2026-107574 CVE record

CVSS 7.5 High

Inefficient Algorithmic Complexity in hMailServer
- Progressive Robot Ltd hMailServer
- Denial of service
Not analysed yet 8 Oct 2026
CVE-2026-103011 CVE record

CVSS 6.5 Medium

Heap-based Buffer Overflow in hMailServer
- Progressive Robot Ltd hMailServer
- Memory corruption
Not analysed yet 8 Oct 2026
CVE-2026-103010 CVE record

CVSS 7.8 High

Heap-based Buffer Overflow in hMailServer
- Progressive Robot Ltd hMailServer
- Memory corruption
Not analysed yet 8 Oct 2026
CVE-2026-103647 CVE record

CVSS 8.0 High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in hMailServer
- Progressive Robot Ltd hMailServer
- Cross-site scripting (XSS)
Not analysed yet 8 Oct 2026
CVE-2026-103649 CVE record

CVSS 7.5 High

Synchronous Access of Remote Resource without Timeout in hMailServer
- Progressive Robot Ltd hMailServer
- CWE-1088
Not analysed yet 8 Oct 2026
CVE-2026-104659 CVE record

CVSS 7.5 High

Origin Validation Error in hMailServer
- Progressive Robot Ltd hMailServer
- CWE-346
Not analysed yet 8 Oct 2026
CVE-2026-104660 CVE record

CVSS 7.8 High

Missing Authorization in hMailServer
- Progressive Robot Ltd hMailServer
- Broken access control
Not analysed yet 8 Oct 2026
CVE-2026-104658 CVE record

CVSS 7.8 High

Reliance on Untrusted Inputs in a Security Decision in hMailServer
- Progressive Robot Ltd hMailServer
- CWE-807
Not analysed yet 8 Oct 2026
CVE-2026-104704 CVE record

CVSS 7.4 High

Cleartext Transmission of Sensitive Information in hMailServer
- Progressive Robot Ltd hMailServer
- Weak cryptography or TLS
Not analysed yet 8 Oct 2026
CVE-2026-100741 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in hMailServer
- Progressive Robot Ltd hMailServer
- Code injection
Not analysed yet 27 Sept 2026