Skip to content
OpenAdvisories

Product · Progressive Robot

hMailServer

60 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-100741

    Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in hMailServer

    Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3.3 on Windows, allows a remote, unauthenticated attacker to run arbitrary JScript inside the hMailServer service process, with the privileg…

    Progressive Robot hMailServer