CVE-2026-94184

Summary

The flaw is a stack-based buffer overflow in fetchmail when NTLM support is enabled, allowing a malicious server to potentially execute arbitrary code or cause service disruption.

Exploitability

Exploitation requires a compromised or malicious mail server advertising NTLM authentication and sending a crafted challenge; this is moderately difficult given the need for specific conditions.

Blast radius

If exploited, the impact could be severe, leading to remote code execution on affected systems, potentially compromising the entire network.

Prioritized remediation

Update fetchmail to versions later than v6.6.7 or disable NTLM support if not needed.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.