CyberSecBulletin

Hsclabs vulnerabilities

We track 2 vulnerabilities in Hsclabs products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 18, 2026.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Hsclabs vulnerabilities

  • 7.5 High severity

    Mailinspector: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2026-29963HsclabsEPSS 2.66%

    HSC MailInspector 5.3.3-7 has a Path Traversal vulnerability due to improper validation of user-supplied input in the /tap/dw.php endpoint. The text parameter is used to construct file paths without adequate normalization or restriction to a safe base director

  • 7.5 High severity

    Mailinspector: External Control of File Name or Path

    CVE-2026-29962HsclabsEPSS 1.53%

    HSC MailInspector v5.3.3-7 contains a Local File Inclusion (LFI) vulnerability caused by improper control of user-supplied file paths. The endpoint /vendor/phpunit/phpunit.php processes user-controlled parameters that directly affect file access operations wit