CVE-2026-107571— hMailServer 默认权限配置不当漏洞
一分钟漏洞结论
影响对象
Progressive Robot Ltd hMailServer
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Progressive Robot hMailServer 6.0.0 至 6.3.6 的 Windows 安装程序存在默认权限配置不当的漏洞。当该产品被安装到权限继承自可写父目录的文件夹中（例如磁盘根目录）时，本地已认证用户可利用该漏洞以邮件服务器的高权限账户身份执行代码。安装程序将服务器程序放置于程序文件夹的 Bin 子目录中，且未为程序文件夹或 Bin 子目录设置任何专属权限，导致它们继承父目录的权限。在默认安装位置（Program Files）下，普通用户仅拥有读取和执行权限，因此配置不受影响；然而，安装程
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2026-107571 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Incorrect Default Permissions in hMailServer
来源: CVE Program / CVE List V5
Vulnerability Description
Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local authenticated user to run code as the mail server's high-privileged accounts when the product is installed in a folder whose permissions are inherited from a writable parent, such as the root of a drive. The installer places the server's programs in the Bin folder of the program folder and gives neither the program folder nor Bin any permissions of their own, so they inherit the parent's. Under the default location, Program Files, ordinary users receive only read and execute and the configuration is not affected; but the installer accepts any path without warning, and a program folder at the root of an NTFS volume inherits write access for a broad group - Authenticated Users (Modify) on a Windows client, Users (create files and folders) on Windows Server. A local user without administrator rights can then alter or replace the service program, which runs as LocalSystem or as the service's virtual account, or the programs an administrator runs elevated from Bin during setup and maintenance, or place a library in Bin that those programs load in place of the system copy, gaining code execution with those privileges. The default Program Files installation is not affected.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
来源: CVE Program / CVE List V5
Vulnerability Type
缺省权限不正确
来源: CVE Program / CVE List V5
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| Progressive Robot Ltd | hMailServer | 6.0.0 ~ 6.3.6 | - |
|
二、漏洞 CVE-2026-107571 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-107571 的情报信息
请登录查看更多情报信息。
CVE-2026-107571 其他参考 (2)
同批安全公告 · Progressive Robot Ltd · 2026-10-19 · 共 5 条
| CVE-2026-107567 | 7.5 HIGH | hMailServer 使用低信任源漏洞 |
| CVE-2026-107569 | 7.5 HIGH | hMailServer 循环条件未检查输入漏洞 |
| CVE-2026-107568 | 6.5 MEDIUM | hMailServer 身份验证缺失漏洞 |
| CVE-2026-107566 | 6.5 MEDIUM | hMailServer 认证缺失漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2026-107571
暂无评论