{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/hmailserver-6.0.0-through-6.3.7-6.0.0-6.3.7/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.8,"id":"CVE-2026-126612"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["hMailServer 6.0.0 through 6.3.7 (6.0.0-6.3.7)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eProgressive Robot hMailServer 6.0.0 through 6.3.7 contains a vulnerability in the Windows installer where the program performs improper link resolution. This allows a local authenticated user to run code as the mail server's service account or as an administrator by utilizing junctions, symbolic links, or mount points. The service, which runs as LocalSystem or as its virtual account, starts programs from the path provided to the installer. Default installations under Program Files are not affected.\u003c/p\u003e\n","date_modified":"2026-11-11T14:03:52Z","date_published":"2026-11-11T14:03:52Z","id":"https://feed.craftedsignal.io/briefs/2026-11-hmailserver-priv-esc-cve-2026-126612/","summary":"The Windows installer for Progressive Robot hMailServer versions 6.0.0 through 6.3.7 is vulnerable to improper link resolution, allowing a local authenticated user to run code as the mail server's service account or as an administrator.","title":"Progressive Robot hMailServer: Local privilege escalation via installer (CVE-2026-126612)","url":"https://feed.craftedsignal.io/briefs/2026-11-hmailserver-priv-esc-cve-2026-126612/"}],"language":"en","title":"CraftedSignal Threat Feed - HMailServer 6.0.0 Through 6.3.7 (6.0.0-6.3.7)","version":"https://jsonfeed.org/version/1.1"}