Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapConfig of the file lib/email-sync/imap-client.ts of the component Email Sync. Executing a manipulation of the argument host/port can lead to server-side request forgery. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-78061 Server-Side Request Forgery in vas3k TaxHacker 0.8.2 via IMAP Client https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-78061
Post summary
The post announces the existence of a Server‑Side Request Forgery vulnerability in vas3k TaxHacker 0.8.2 via the IMAP client, without detailing a PoC, exploit, patch, or active attacks.
CVE-2026-78061 A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapConfig of the file lib/email-sync/imap-client.ts of the component Ema… https://www.cve.org/CVERecord?id=CVE-2026-78061
Post summary
A brief mention of CVE‑2026‑78061 affecting the buildImapConfig function in vas3k TaxHacker; no further technical, exploit, or patch details are provided.