Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
sagredo qmail before 2026.04.07 allows tls_quit remote code execution because of popen in notlshosts_auto in qmail-remote.c.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-17 | 2 | Disclosure2 |
| 2026-04-19 | 1 | Disclosure1 |
CVE-2026-41113: sagredo fork of qmail: RCE https://www.openwall.com/lists/oss-security/2026/04/18/5 via popen() in feature called notlshosts_auto that was added in October 2024
Post summary
The text announces CVE‑2026‑41113 affecting the sagredo qmail fork, noting an RCE through popen() in the notlshosts_auto feature added in October 2024, without providing PoC or exploitation evidence.
🛡️ CVE‑2026‑41113 – qmail TLS quit RCE (High): In sagredo qmail before 2026.04.07, a popen call in notlshosts_auto within qmail-remote.c can be reached through tls_quit, enabling remote code execution against mail transport infrastructure. CVSS high, updated today in Tenable’s newest CVE feed and affecting a core mail stack component used in production systems. https://www.tenable.com/cve/CVE-2026-41113 #CVE202641113 #Qmail #EmailSecurity #RCE #ThreatIntel
Post summary
CVE‑2026‑41113 is a high‑severity remote code execution vulnerability in qmail’s TLS quit handling, detailed with technical specifics but no PoC, exploit code, or indications of active exploitation.
CVE-2026-41113 sagredo qmail before 2026.04.07 allows tls_quit remote code execution because of popen in notlshosts_auto in qmail-remote.c. https://www.cve.org/CVERecord?id=CVE-2026-41113
Post summary
The post announces CVE-2026-41113, detailing a remote code execution vulnerability in qmail caused by a popen call during TLS quit.