Skip to content
OpenAdvisories

Vendor

M66B

2 known vulnerabilities.

Products

FairEmail 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-68509

    FairEmail: Path traversal in shared attachment handling can write files outside the intended shared directory

    FairEmail is a fully featured, open source, privacy-friendly email app for Android. Prior to 1.2325, shared attachment handling does not adequately sanitize an attacker-controlled filename before constructing its destination path. A local attacker-controlled …

    M66B FairEmail
  • Medium 6.1
    CVE-2026-54521

    FairEmail: Cross-site scripting (XSS) in AMP message rendering (ActivityAMP)

    FairEmail is a fully featured, open source, privacy-friendly email app for Android. Prior to 1.2319, the ActivityAMP AMP message renderer in app/src/main/java/eu/faircode/email/ActivityAMP.java enables JavaScript in its WebView but incompletely sanitizes untr…

    M66B FairEmail