Skip to main content

Net Mail CVE-2026-42499

| EUVDEUVD-2026-28432 HIGH
Creation of Immutable Text Using String Concatenation (CWE-1046)
2026-05-07 Go GHSA-xq5j-9r39-c3vf
Information Disclosure Net Mail
7.5
CVSS 3.1 · Vendor: Go
Share

Severity by source

Vendor (Go) PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
SUSE
HIGH
qualitative

Primary rating from Vendor (Go).

CVSS VectorVendor: Go

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

4
CVSS changed
May 08, 2026 - 22:22 NVD
7.5 (HIGH)
Patch available
May 07, 2026 - 21:02 EUVD
CVE Published
May 07, 2026 - 19:41 nvd
HIGH 7.5
CVE Published
May 07, 2026 - 19:41 nvd
UNKNOWN (no severity yet)

DescriptionCVE.org

Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.

Analysis

Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.

More in Net Mail

View all
CVE-2026-39820 HIGH POC
7.5 May 07

Denial of service in Go standard library net/mail package allows remote unauthenticated attackers to exhaust CPU and mem

Same weakness CWE-1046 – Creation of Immutable Text Using String Concatenation

View all
CVE-2026-23955 MEDIUM POC
4.2

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Vendor StatusVendor

SUSE

Severity: High
Product Status
openSUSE Tumbleweed Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS Affected

Share

CVE-2026-42499 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy