Skip to content
OpenAdvisories

Product · Apache Software Foundation

Pony Mail

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-41873

    Pony Mail: Admin account takeover via request smuggling

    ** UNSUPPORTED WHEN ASSIGNED ** Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Pony Mail leading to admin account takeover. This issue affects all versions of the Lua implementation of Pony Mail. There is a P…

    Apache Software Foundation Pony Mail