Pony Mail CVE Vulnerabilities

By Apache — 1 known vulnerabilities

Critical
1
High
0
Medium
0
Low
0
None
0

All Pony Mail CVEs

Recent Highest Score Oldest
CVE-2026-41873
9.8 critical

** UNSUPPORTED WHEN ASSIGNED ** Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Pony Mail leading to admin account takeover. This issue affects all versions of the Lua implementation of Pony Mail. There is a Python implementation under development u

Apr 28, 2026