PT-2025-51552 · Unknown+1 · Canary Mail+1

Bbaboha · Published 2025-10-12 · Updated 2025-12-21 · CVE-2025-65318

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Canary Mail (affected versions not specified) Blue Mail (affected versions not specified)

Description A flaw exists in the data protection mechanisms of email clients. Remote attackers may be able to conduct phishing attacks by exploiting this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

BDU:2025-13739

BDU:2025-13740

CVE-2025-65318

Affected Products

Bluemail

Canary Mail

References · 11

• 🔥 https://github.com/bbaboha/CVE-2025-65318-and-CVE-2025-65319 · Exploit
• 🔥 https://drive.google.com/file/d/14wrTzvcLPfFsWmy-SAtDwwZKKPssBsx5/view · Exploit
• https://bdu.fstec.ru/vul/2025-13740 · Security Note
• https://bdu.fstec.ru/vul/2025-13739 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-65318 · Security Note
• https://osv.dev/vulnerability/CVE-2025-65318 · Vendor Advisory
• https://github.com/nickvourd/RTI-Toolkit · Note
• http://canarymail.com · Note
• https://twitter.com/CVEnew/status/2002857320259420164 · Twitter Post
• https://drive.google.com/file/d/1dVzXuHBk3B1DiFpwFYwj2NNjeKGnGSwT/view · Note
• http://canary.com · Note