Threats Tagged 'cve-2026-67446'
View all threats tagged with 'cve-2026-67446'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-67446'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-67446 is an uncontrolled resource consumption vulnerability in axllent mailpit's thumbnail endpoint. The endpoint decodes attacker-supplied image attachments into full raster images before validating their dimensions or memory usage, allowing a remote client to cause excessive CPU and memory consumption. This can be triggered by supplying a compact but high-dimension image attachment and requesting its thumbnail, which forces the server to decode a large image in memory. The vulnerability affects mailpit versions prior to 1.30.4. The CVSS score is 5.3, indicating a medium severity impact primarily on availability. Join the discussion | CVE Database V5 | 09/02/2026, 23:39:08 UTC Added: 08/20/2026, 21:22:39 UTC |
Showing 1 to 1 of 1 result