Mailinspector vulnerabilities

2 known vulnerabilities in Mailinspector from Hsclabs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Mailinspector: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-29963May 18, 2026HsclabsEPSS 2.66%

  HSC MailInspector 5.3.3-7 has a Path Traversal vulnerability due to improper validation of user-supplied input in the /tap/dw.php endpoint. The text parameter is used to construct file paths without adequate normalization or restriction to a safe base director

• 7.5 High severity

  Mailinspector: External Control of File Name or Path

  CVE-2026-29962May 18, 2026HsclabsEPSS 1.53%

  HSC MailInspector v5.3.3-7 contains a Local File Inclusion (LFI) vulnerability caused by improper control of user-supplied file paths. The endpoint /vendor/phpunit/phpunit.php processes user-controlled parameters that directly affect file access operations wit