CVE-2026-94184
MediumCVSS 5.3Exploitation Probability (EPSS)
Elevated risk57th percentile - higher than 57% of all known CVEs
Summary
A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.
Risk Assessment
Potential remote code execution or denial of service (process termination) from an attack by a malicious mail server. Requires fetchmail to be built with NTLM support and connecting to such a server.
Recommendation
Update fetchmail to a patched version. If possible, disable NTLM support in fetchmail or avoid connecting to untrusted mail servers.
Other vulnerabilities in fetchmail
Original NVD description (English source)
A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS