PT-2026-36773

CVE-2026-43860

Published

2026-05-04

Updated

2026-10-05

CVSS 3.1

3.7

Low

MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions mutt versions prior to 2.3.2

Description An issue exists where the hash passwd is occasionally truncated by one byte during IMAP auth cram MD5 digest processes.

Recommendations Update to version 2.3.2 or later.

Exploitability

Exploit

Fix

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

AZL-85596

CLSA-2026-1790003865

CLSA-2026-1791192215

OESA-2026-2200

OPENSUSE-SU-2026:21016-1

SUSE-SU-2026:22340-1

SUSE-SU-2026:2300-1

SUSE-SU-2026:2301-1

Found an issue in the description? Have something to add? Feel free to write us 👾