Threats tagged 'ghsa-crmj-h347-23x8'

CVE-2026-124579 is a high-severity vulnerability in aaPanel BillionMail up to version 4.9. It affects the Relay Configuration API component, specifically the file core/api/relay/v1/relay.go. The flaw involves injection via manipulation of the helo_name argument, which can be exploited remotely. Public exploit code has been disclosed, but the vendor has not responded or issued a fix.