PT-2026-23623 · Hsc Cybersecurity · Hc Mailinspector

Gabriel + 1 · Publicado 2026-03-06 · Atualizado 2026-03-06 · CVE-2026-3610

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions HSC Cybersecurity Mailinspector versions up to 5.3.2-3

Description A cross-site scripting issue exists in HSC Cybersecurity Mailinspector related to the URL Handler component. The issue stems from the manipulation of the error description argument within the /mailinspector/mliUserValidation.php file. This allows for remote attacks. The exploit has been publicly released.

Recommendations Upgrade to version 5.4.0 or apply the hotfix provided by the vendor.

Exploit

Correção

XSS

Code Injection

Enumeração de Fraquezas

CWE-79

CWE-94

Identificadores relacionados

CVE-2026-3610

Produtos afetados

Hc Mailinspector

Referências · 9

• 🔥 https://docs.google.com/document/d/1KI2SIDcVm5U3Yzo5tNT5YOwREQWe_5BJaWe-ctRmLoI/edit?usp=sharing · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-3610 · Nota de Segurança
• https://vuldb.com/?ctiid.349219 · Nota
• https://vuldb.com/?id.349219 · Nota
• https://vuldb.com/?submit.748710 · Nota
• https://twitter.com/VulmonFeeds/status/2029794549955023239 · Publicação no Twitter
• https://twitter.com/cyberbivash/status/2029729771047780408 · Publicação no Twitter
• https://t.me/cveNotify/154448 · Publicação no Telegram
• https://t.me/CVEtracker/46535 · Publicação no Telegram