Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

axllent — Vulnerabilities & Security Advisories 16

Browse all 16 CVE security advisories affecting axllent. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Axllent develops software components primarily used in web applications and enterprise systems. Historically, the organization's products have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities. Security researchers have identified multiple authentication bypass flaws and insecure direct object references in their offerings. While no major public security incidents have been widely documented, the five CVEs recorded to date highlight recurring input validation weaknesses. The company's codebase has shown patterns of insufficient sanitization of user-supplied data and inadequate access controls in administrative interfaces, requiring consistent remediation efforts to maintain secure deployment environments.

Top products by axllent: mailpit
CVE ID Title CVSS Severity Published
CVE-2026-84697 Mailpit SSRF Deny List Bypass via Azure Metadata and IPv6 Prefix — mailpit CWE-918 5.3 Medium 2026-09-02
CVE-2026-67448 Mailpit: WebSocket origin check bypass via percent-encoded path (regression of CVE-2026-22689) — mailpit CWE-177 6.5 Medium 2026-08-20
CVE-2026-67447 Mailpit: SMTP DATA line reader buffers over-limit input before size enforcement — mailpit CWE-770 5.3 Medium 2026-08-20
CVE-2026-67445 Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection — mailpit CWE-400 5.3 Medium 2026-08-20
CVE-2026-67446 Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling — mailpit CWE-400 5.3 Medium 2026-08-20
CVE-2026-48824 Mailpit: Sibling-endpoint memory-exhaustion DoS via unbounded JSON body on /api/v1/messages, /api/v1/tags, and /api/v1/message/{id}/release (incomplete fix of GHSA-fpxj-m5q8-fphw) — mailpit CWE-770 5.3 Medium 2026-07-20
CVE-2026-45713 Mailpit: Unauthenticated remote memory-exhaustion DoS via unlimited SMTP DATA and /api/v1/send body sizes — mailpit CWE-400 7.5 High 2026-07-20
CVE-2026-45712 Mailpit: Concurrent map read & write in proxy CSS rewriter - remote unauth crash (fatal error: concurrent map read and map write) — mailpit CWE-362 5.9 Medium 2026-07-20
CVE-2026-45711 Mailpit: Path traversal & arbitrary file write in mailpit dump --http via attacker-controlled message IDs — mailpit CWE-22 5.9 Medium 2026-07-20
CVE-2026-45709 Mailpit has an incomplete fix for GHSA-6jxm: HTML check still permits SSRF to private/loopback/IMDS via missing IP-filter dialer — mailpit CWE-918 5.8 Medium 2026-07-20
CVE-2026-55187 Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms (follow-up to CVE-2026-27808) — mailpit CWE-918 5.8 Medium 2026-07-10
CVE-2026-27808 Mailpit is Vulnerable to Server-Side Request Forgery (SSRF) via Link Check API — mailpit CWE-918 5.8 Medium 2026-02-25
CVE-2026-23845 Mailpit Vulnerable to Server-Side Request Forgery (SSRF) via HTML Check API — mailpit CWE-918 5.8 Medium 2026-01-19
CVE-2026-23829 Mailpit has SMTP Header Injection via Regex Bypass — mailpit CWE-93 5.3 Medium 2026-01-18
CVE-2026-22689 Mailpit is vulnerable to Cross-Site WebSocket Hijacking (CSWSH) allowing unauthenticated access to emails — mailpit CWE-1385 6.5 Medium 2026-01-10
CVE-2026-21859 Mailpit Proxy Endpoint is Vulnerable to Server-Side Request Forgery (SSRF) — mailpit CWE-918 5.8 Medium 2026-01-07

This page lists every published CVE security advisory associated with axllent. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.