Numail
Monthly
Unauthenticated OS command injection in Green-Computing NUMail lets remote attackers execute arbitrary operating-system commands on the underlying mail server host. The CVSS 4.0 score of 9.3 reflects network reach with no privileges or user interaction and full compromise of confidentiality, integrity, and availability. No public exploit has been identified at time of analysis, and the flaw is not listed in CISA KEV, but the combination of pre-auth access and command execution makes it a high-priority patch target.
Unauthenticated OS command injection in Green-Computing NUMail lets remote attackers execute arbitrary operating-system commands on the underlying mail server host. The CVSS 4.0 score of 9.3 reflects network reach with no privileges or user interaction and full compromise of confidentiality, integrity, and availability. No public exploit has been identified at time of analysis, and the flaw is not listed in CISA KEV, but the combination of pre-auth access and command execution makes it a high-priority patch target.