https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:02:52.118227+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2008-avi-420 certa-2008-avi-420 — Deux vulnérabilités dans Postfix permettent à un utilisateur malveillant d'élever ses privilèges et de porter atteinte… 2026-10-03T06:02:52.124108+00:00 certa-2008-avi-420 https://cve.radiocsirt.org/vuln/euvd-2026-128099 EUVD-2026-128099 2026-10-03T06:02:52.124150+00:00 EUVD-2026-128099 https://cve.radiocsirt.org/vuln/fkie_cve-2008-2937 fkie_cve-2008-2937 2026-10-03T06:02:52.124165+00:00

Postfix 2.5 before 2.5.4 and 2.6 before 2.6-20080814 delivers to a mailbox file even when this file is not owned by the recipient, which allows local users to read e-mail messages by creating a mailbox file corresponding to another user's account name.

 https://cve.radiocsirt.org/vuln/ghsa-44wx-mcwc-xfg9 GHSA-44wx-mcwc-xfg9 2026-10-03T06:02:52.124195+00:00

Postfix 2.5 before 2.5.4 and 2.6 before 2.6-20080814 delivers to a mailbox file even when this file is not owned by the recipient, which allows local users to read e-mail messages by creating a mailbox file corresponding to another user's account name.

 https://cve.radiocsirt.org/vuln/gsd-2008-2937 gsd-2008-2937 2026-10-03T06:02:52.124228+00:00 gsd-2008-2937 https://cve.radiocsirt.org/vuln/rhsa-2011:0422 RHSA-2011:0422 — Red Hat Security Advisory: postfix security update 2026-10-03T06:02:52.124254+00:00

postfix improper mailbox permissions postfix: SMTP commands injection during plaintext to TLS session switch