PT-2026-23623 · Hsc Cybersecurity · Hc Mailinspector

Gabriel + 1 · CVE-2026-3610 · Published 2026-03-06 · Updated 2026-03-06

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions HSC Cybersecurity Mailinspector versions up to 5.3.2-3

Description A cross-site scripting issue exists in HSC Cybersecurity Mailinspector related to the URL Handler component. The issue stems from the manipulation of the error description argument within the /mailinspector/mliUserValidation.php file. This allows for remote attacks. The exploit has been publicly released.

Recommendations Upgrade to version 5.4.0 or apply the hotfix provided by the vendor.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-3610

Affected Products

Hc Mailinspector

References · 9

• 🔥 https://docs.google.com/document/d/1KI2SIDcVm5U3Yzo5tNT5YOwREQWe_5BJaWe-ctRmLoI/edit?usp=sharing · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-3610 · Security Note
• https://vuldb.com/?ctiid.349219 · Note
• https://vuldb.com/?id.349219 · Note
• https://vuldb.com/?submit.748710 · Note
• https://twitter.com/VulmonFeeds/status/2029794549955023239 · Twitter Post
• https://twitter.com/cyberbivash/status/2029729771047780408 · Twitter Post
• https://t.me/cveNotify/154448 · Telegram Post
• https://t.me/CVEtracker/46535 · Telegram Post