Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
OVHcloud records in CISA KEVNo OVHcloud vulnerabilities are listed in CISA KEV.
Priority LOW 27
Authenticated users are able to manipulate both the SMTP envelope “Envelope-from” and “From” fields when sending emails through OVH mail servers.
CVSS 4.0MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.00139 · Published 2026-10-07 · Fixed in 2026-07-20 CWE-1188
Open these records in search →