Vendors / Canarymail Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now Canarymail records in CISA KEV No Canarymail vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 80
When using the attachment interaction functionality, Canary Mail 5.1.40 and below saves documents to a file system without a Mark-of-the-Web tag, which allows attackers to bypass the built-in file protection mechanisms o…
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.0056 · Published 2025-12-16 · No fix listed CWE-693
Priority LOW 35
core/imap/MCIMAPSession.cpp in Canary Mail before 3.22 has Missing SSL Certificate Validation for IMAP in STARTTLS mode.
CVSS 3.1 HIGH 7.4· Network · No auth · No interaction · EPSS 0.0109 · Published 2021-02-17 · No fix listed CWE-295
Open these records in search → All records by CVSS severity
1 1 0 0 0
