Threats Tagged 'cve-2026-107567'
View all threats tagged with 'cve-2026-107567'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-107567'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-107567 is a vulnerability in Progressive Robot Ltd's hMailServer versions 6.0.0 through 6.3.6. It allows a remote unauthenticated attacker to have mail they send signed with the DKIM key of any domain hosted on the server, bypassing DKIM and DMARC protections. This occurs because the server signs every message on its first delivery pass as the domain in the From header without verifying sender authentication. Exploitation requires DKIM signing to be enabled for the hosted domain and a forwarding mechanism to an external address. The vulnerability can also affect messages submitted over authenticated SMTP, allowing cross-domain DKIM signing. The CVSS 3.1 score is 7.5 (high severity). Join the discussion | CVE Database V5 | 10/19/2026, 15:34:17 UTC Added: 10/19/2026, 15:49:15 UTC |
Showing 1 to 1 of 1 result