Pony Mail vulnerabilities

1 known vulnerability in Pony Mail from Apache. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Pony Mail: Inconsistent Interpretation of HTTP Requests

  CVE-2026-41873Apr 28, 2026Apache

  ** UNSUPPORTED WHEN ASSIGNED ** Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Pony Mail leading to admin account takeover. This issue affects all versions of the Lua implementation of Pony Mail. There is a Py