CVE-2026-114472— hMailServer 资源池不足漏洞
一分钟漏洞结论
影响对象
Progressive Robot Ltd hMailServer
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Progressive Robot hMailServer 6.0.0 至 6.3.6 版本中，ACME HTTP-01 挑战响应器的资源池不足，允许远程未认证攻击者导致证书颁发或续期失败。当服务器通过 ACME 协议获取或更新 TLS 证书时，会在 80 端口运行 HTTP-01 挑战响应器，供证书颁发机构（CA）读取挑战令牌；该响应器一次仅处理一个连接：接受一个套接字、最多等待 5 秒接收请求、响应请求，之后才接受下一个连接。若某个客户端建立连接后不发送任何数据，便会独占该唯一工作线程直至超时。因此，在证书验证
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2026-114472 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Insufficient Resource Pool in hMailServer
来源: CVE Program / CVE List V5
Vulnerability Description
Insufficient resource pool in the ACME HTTP-01 challenge responder of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to cause a certificate issuance or renewal to fail. When the server obtains or renews a TLS certificate over ACME it runs an HTTP-01 challenge responder on port 80 for the certificate authority to read the challenge token; the responder served one connection at a time, accepting a socket, waiting up to five seconds to receive a request, answering it, and only then accepting the next. A client that connected and sent nothing held the single worker for the whole timeout, so enough idle connections during a validation keep the certificate authority's own request from being answered in time and the validation fails. Sustained across a certificate's renewals this leads to the certificate expiring, after which clients refuse the server's TLS; the mail service itself continues on its current certificate until then. No authentication is required to connect to the responder. Version 6.3.7 serves up to 64 connections at once and closes a connection past that, so that where a handful of idle connections, one after another, sufficed before, a client must keep 64 idle connections open at once throughout a validation to have the certificate authority's connection closed.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
来源: CVE Program / CVE List V5
Vulnerability Type
不充分的资源池
来源: CVE Program / CVE List V5
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| Progressive Robot Ltd | hMailServer | 6.0.0 ~ 6.3.6 | - |
|
二、漏洞 CVE-2026-114472 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-114472 的情报信息
请登录查看更多情报信息。
CVE-2026-114472 厂商页面 (1)
CVE-2026-114472 其他参考 (1)
同批安全公告 · Progressive Robot Ltd · 2026-10-21 · 共 12 条
| CVE-2026-114489 | 8.1 HIGH | hMailServer 授权缺失漏洞 |
| CVE-2026-114490 | 7.8 HIGH | hMailServer 身份验证错误漏洞 |
| CVE-2026-114476 | 7.5 HIGH | hMailServer 身份验证错误漏洞 |
| CVE-2026-114475 | 6.5 MEDIUM | hMailServer 授权缺失漏洞 |
| CVE-2026-114478 | 5.9 MEDIUM | hMailServer 混淆代理漏洞 |
| CVE-2026-114474 | 5.9 MEDIUM | hMailServer 使用不可信来源漏洞 |
| CVE-2026-114479 | 5.8 MEDIUM | hMailServer 非安全失败（开放）漏洞 |
| CVE-2026-114470 | 5.3 MEDIUM | hMailServer 跨站请求伪造漏洞 |
| CVE-2026-114473 | 5.0 MEDIUM | hMailServer 身份验证绕过漏洞 |
| CVE-2026-114471 | 4.7 MEDIUM | hMailServer 敏感信息写入日志文件漏洞 |
| CVE-2026-114477 | 4.3 MEDIUM | hMailServer 未授权访问漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2026-114472
暂无评论