Post
OffSequence
offseq.bsky.social
did:plc:t5t6qep2vfipbi7f54demwev
CRITICAL vulnerability in hMailServer (Windows, v6.0.0 – 6.3.3): CVE-2026-100741 allows remote unauth RCE via JScript event scripting. Disable event scripting/JScript to mitigate. https://radar.offseq.com/threat/cve-2026-100741-cwe-95-improper-neutralization-of-directives-in-dynamically-evaluated...
https://radar.offseq.com/threat/cve-2026-100741-cwe-95-improper-neutralization-of-directives-in-dynamically-evaluated-code-eval-a98d3d387bf12b13
2026-09-27T09:00:28.165Z