CVE-2026-104704

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-104704

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-104704.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-104704

Published

2026-10-08T10:52:40Z

Modified

2026-10-10T02:47:21Z

Severity

7.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator

Summary

Cleartext Transmission of Sensitive Information in hMailServer

Details

Progressive Robot hMailServer 6.0.0 through 6.3.5 does not enforce TLS for outbound SMTP delivery to a mail exchanger whose DNSSEC-validated TLSA records contain no DANE-EE (usage 3) record, contrary to RFC 7672 section 2.2. The server used only DANE-EE records and treated a validated TLSA record set consisting of DANE-TA (usage 2) or otherwise unusable records as if no records were published, so delivery to such a host fell back to opportunistic TLS. An attacker with an active position on the network path between the server and the recipient's mail exchanger can suppress or break the STARTTLS negotiation and cause messages to be delivered in cleartext, where they can be read and modified.

Database specific

{
    "cna_assigner": "GitLab",
    "cwe_ids": [
        "CWE-319"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/104xxx/CVE-2026-104704.json"
}

References

Affected packages

Git / gitlab.com/hmailserver/hmailserver

Affected ranges

Type

GIT

Repo

https://gitlab.com/hmailserver/hmailserver

Events

Introduced

e4b7163189ac6ce365bb954cf3e264e2e3105a18

Fixed

e3c448aa66fc310b74d076884d54fae951296915

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "6.0.0"
        },
        {
            "fixed": "6.3.6"
        },
        {
            "fixed": "6.3.5"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "DESCRIPTION"
    ]
}

Affected versions

Other

build-inputs-1

v6.*

v6.0.0

v6.0.0-B3

v6.0.0-B4

v6.1.0

v6.2.0

v6.2.1

v6.2.10

v6.2.11

v6.2.12

v6.2.13

v6.2.14

v6.2.15

v6.2.16

v6.2.17

v6.2.18

v6.2.19

v6.2.2

v6.2.20

v6.2.21

v6.2.22-pre1

v6.2.22-pre2

v6.2.22-pre3

v6.2.22-pre4

v6.2.22-pre5

v6.2.22-pre6

v6.2.23-alpha1

v6.2.23-alpha2

v6.2.24

v6.2.25

v6.2.26

v6.2.27

v6.2.28

v6.2.3

v6.2.4

v6.2.5

v6.2.6

v6.2.7

v6.2.8

v6.2.9

v6.3.0

v6.3.1

v6.3.2

v6.3.3

v6.3.4

v6.3.5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-104704.json"