CVE-2026-43859

CVSS Score & Metrics

Base Score

3.7 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N                                    

mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest.

Published Date

May 04, 2026

Last Modified

May 05, 2026

CWE ID

CWE-158

Source

NVD

Vendor

mutt

Product

mutt