CVE-2026-94184
mediumpriority · track · 21EPSS 0.012 · 68 %ileDEUSEPSS · scored 2026-10-28
A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.9–8.1
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (7)
Products and version ranges known to be affected.
advisories (1)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2026-3495fetchmail: Schwachstelle ermöglicht CodeausführungDeutsch2026-09-21csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in fetchmail ausnutzen, um beliebigen Programmcode auszuführen.
sources
Which sources assert this record, and when.
references (10) nvd
External citations — patches, advisories, analysis.
- http://www.openwall.com/lists/oss-security/2026/09/23/1
- https://access.redhat.com/errata/RHSA-2026:85959
- https://access.redhat.com/errata/RHSA-2026:86981
- https://access.redhat.com/errata/RHSA-2026:86982
- https://access.redhat.com/security/cve/CVE-2026-94184
- https://bugzilla.redhat.com/show_bug.cgi?id=2531984
- https://bugzilla.redhat.com/show_bug.cgi?id=2537395
- https://gitlab.com/fetchmail/fetchmail/-/commit/cb5be5c38471eec19e519ace0bc569176317ea92
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan