UpHeron
All vulnerabilities

Servers and applications

CVE-2026-26312

Out-of-Memory Denial of Service via Malformed Nested MIME Messages

Severity
Medium 6.5
Published
14 Feb 2026
Last changed
17 Feb 2026
Added to UpHeron
22 Oct 2026
Also known as
GHSA-jm95-876q-c9gw
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
StalwartServers and applications · github:stalwartlabs/stalwart
  • Version 0.15.4

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-26312
  • GitHub Advisory Database https://github.com/advisories/GHSA-jm95-876q-c9gw
  • github.com https://github.com/stalwartlabs/stalwart/security/advisories/GHSA-jm95-876q-c9gw