CVE-2026-41113

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-41113

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-41113.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-41113

Published

2026-04-16T22:02:10.225Z

Modified

2026-07-15T01:49:05.241962641Z

Severity

8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

sagredo qmail before 2026.04.07 allows tlsquit remote code execution because of popen in notlshostsauto in qmail-remote.c.

Database specific

{
    "cwe_ids": [
        "CWE-78"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41113.json",
    "cna_assigner": "mitre"
}

References

Affected packages

Git / github.com/sagredo-dev/qmail

Affected ranges

Type

GIT

Repo

https://github.com/sagredo-dev/qmail

Events

Introduced

e079d943b0d910ab49f07687cef906f9e28b87f9

Fixed

b5168117cdfc15eba30ee7d42d604122d6eaf4d4

Database specific

{
    "extracted_events": [
        {
            "introduced": "2024.10.26"
        },
        {
            "fixed": "2026.04.07"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

v2024.*

v2024.10.26

v2024.11.10

v2024.11.27

v2024.12.01

v2025.*

v2025.02.11

v2025.04.18

v2025.04.25

v2025.04.30

v2025.06.09

v2025.07.10

v2025.09.08

v2026.*

v2026.01.05

v2026.01.08

v2026.02.03

v2026.02.25

v2026.04.02

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-41113.json"