CVE-2026-29962

CVEs › CVE-2026-29962

Description

HSC MailInspector v5.3.3-7 contains a Local File Inclusion (LFI) vulnerability caused by improper control of user-supplied file paths. The endpoint /vendor/phpunit/phpunit.php processes user-controlled parameters that directly affect file access operations without adequate validation, sanitization, or path restriction. This allows a remote attacker to exploit Path Traversal techniques to read arbitrary files from the underlying operating system and application directories, leading to sensitive information disclosure.

Overview

State: PUBLISHED
Assigner (CNA): mitre
CVSS severity: high
CVSS score: 7.5 / 10
CVSS vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Effective score: 7.5 / 10 HIGH source: CNA overview
CWE(s): —
Reserved: 2026-03-04
Published: 2026-05-18 00:00 UTC
Last updated: 2026-05-18 17:05 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/29xxx/CVE-2026-29962.json
Linked Threat: CVE-2026-29962 — CVE-2026-29962

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published: 2026-05-18 18:17:21 UTC
NVD last modified: 2026-05-19 17:21:35 UTC
NVD CVSS v3.1: 7.5 / 10 HIGH source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
NVD CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability subscore: 3.9 / 10
Impact subscore: 3.6 / 10
EPSS score: 0.0005 (probability of exploitation in next 30 days)
EPSS percentile: 17.04% vs all CVEs — higher = more likely to be exploited, as of 2026-05-24

NVD-assigned CWE(s): CWE-73 (differs from the CNA list above)

NVD / KEV / EPSS data refreshed 2026-05-25 02:08 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID: EUVD-2026-30781
Assigner: mitre
Published: May 18, 2026, 12:00:00 AM
Updated: May 19, 2026, 1:42:21 PM
EUVD base score (CVSS 3.1): 7.5 / 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EUVD-reported EPSS: 0.0500
Vendors: n/a
Products: n/a (n/a)
Aliases: GHSA-gx62-92q7-r437

ENISA description: HSC MailInspector v5.3.3-7 contains a Local File Inclusion (LFI) vulnerability caused by improper control of user-supplied file paths. The endpoint /vendor/phpunit/phpunit.php processes user-controlled parameters that directly affect file access operations without adequate validation, sanitization, or path restriction. This allows a remote attacker to exploit Path Traversal techniques to read arbitrary files from the underlying operating system and application directories, leading to sensitive information disclosure.

EUVD references (3)

Affected products (1)

Vendor	Product	Versions	Platforms
n/a	n/a	`n/a` (affected)	—

Affected products — CPE 2.3 (1) NVD

NVD's normalized CPE 2.3 matchers, used by vendor tools (vulnerability scanners, asset managers) for automated detection. Compare with the CNA's free-text "Affected products" section above.

cpe:2.3:a:hsclabs:mailinspector:5.3.3-7:*:*:*:*:*:*:*

Vendor references (3)

References embedded in the original CVE record by the assigning CNA.

Web references (6)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

https://github.com/sql3t0/cve-disclosures tenable:github.com
https://github.com/sql3t0/cve-disclosures/blob/main/01_-_CVE-2026-29962_LFI%2BPath_Traversal.md tenable:github.com
https://hsclabs.com/pt-br/mailinspector tenable:hsclabs.com
https://nvd.nist.gov/vuln/detail/CVE-2026-29962 tenable:nvd.nist.gov
https://www.cve.org/CVERecord?id=CVE-2026-29962 tenable:www.cve.org
https://www.first.org/epss/ tenable:www.first.org

NVD-tagged references (3)

Reference list NVD curates from the CNA record, vendor advisories, and third-party reports. The tag chips below are NVD's analyst-assigned categories.

https://github.com/sql3t0/cve-disclosures cve@mitre.org Third Party Advisory
https://github.com/sql3t0/cve-disclosures/blob/main/01_-_CVE-2026-29962_LFI%2BPath_Traversal.md cve@mitre.org Third Party Advisory
https://hsclabs.com/pt-br/mailinspector cve@mitre.org Product

Remediations (19)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

Critical Microsoft Exchange Server Vulnerability Actively Exploited in ...

web:cybersecuritynews.com

Microsoft Exchange Server spoofing flaw, is being actively exploited against on-premises systems before a permanent patch is available.

2026-05-23 21:55 UTC
NVD - Vulnerabilities

web:nvd.nist.gov

Vulnerabilities All vulnerabilities in the NVD have been assigned a CVE identifier and thus, abide by the definition below. CVE defines a vulnerability as: "A weakness in the computational logic (e.g., code) found in software and hardware components that, when exploited, results in a negative impact to confidentiality, integrity, or availability. Mitigation of the vulnerabilities in this ...

2026-05-23 21:55 UTC
About the security content of iOS 26.2 and iPadOS 26.2

web:support.apple.com

This document describes the security content of iOS 26.2 and iPadOS 26.2.

2026-05-23 21:55 UTC
Addressing Exchange Server May 2026 vulnerability CVE-2026-42897

web:techcommunity.microsoft.com

We wanted to tell you how to address the Exchange Server May 2026 vulnerability CVE - 2026 -42897.

2026-05-23 21:55 UTC
Known Exploited Vulnerabilities Catalog - CISA

web:www.cisa.gov

For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative source of vulnerabilities that have been exploited in the wild. Organizations should use the KEV catalog as an input to their vulnerability management prioritization framework.

2026-05-23 21:55 UTC
May 2026 Patch Tuesday: Updates and Analysis | CrowdStrike

web:www.crowdstrike.com

Microsoft has released security updates for 130 vulnerabilities, including 30 critical, in its May 2026 Patch Tuesday rollout.

2026-05-23 21:55 UTC
Microsoft Confirms Active 0-Day Exploit—Check Emergency Mitigation

web:www.forbes.com

Updated May 18: This article has been updated to include further details on the emergency mitigation process recommended by Microsoft after the CVE - 2026 -42897 Exchange Server zero-day was ...

2026-05-23 21:55 UTC
Microsoft May 2026 Patch Tuesday: Many fixes, but no zero-days

web:www.helpnetsecurity.com

Microsoft has marked May 2026 Patch Tuesday by releasing fixes for 120+ CVE -numbered vulnerabilities, none of which are actively exploited.

2026-05-23 21:55 UTC
Oracle Security Alert Advisory - CVE-2026-21992

web:www.oracle.com

Oracle always recommends that customers remain on actively-supported versions and apply all Security Alerts and Critical Patch Update security patches without delay. Affected Products and Patch Information The security vulnerability addressed by this Security Alert affects the products listed below.

2026-05-23 21:55 UTC
Oracle Releases Emergency Patch for Critical Identity Manager ...

web:www.securityweek.com

Oracle issues out-of-band updates to patch CVE - 2026 -21992, a critical vulnerability in Identity Manager and Web Services Manager.

2026-05-23 21:55 UTC
Pennsylvania Access To Criminal History - Home

web:epatch.pa.gov

Why does PATCH exist? Its purpose is to better enable the public to obtain criminal history record checks. The repository was created and is maintained in accordance with Pennsylvania's Criminal History Information Act contained in Chapter 91 of Title 18, Crimes Code. This Act also directs the Pennsylvania State Police (PSP) to disseminate criminal history data to criminal justice agencies ...

2026-05-26 02:57 UTC
01_-_CVE-2026-29962_LFI+Path_Traversal.md - GitHub

web:github.com

Collection of CVEs and security advisories discovered and responsibly disclosed by Sql3t0, including technical details, impact assessment, and mitigation guidance. - sql3t0/ cve -disclosures

2026-05-26 02:57 UTC
Nvd - Cve-2026-9082

web:nvd.nist.gov

Information Technology Laboratory National Vulnerability Database Vulnerabilities

2026-05-26 02:57 UTC
patch.moe - Age Verification

web:patch.moe

Age Verification Are you 18 years or older? YES NO

2026-05-26 02:57 UTC
Patch - patch

web:patchnashville.com

Patch was born out of a love of children's fashion and classic yet modern gifting. The goal was to create a timeless yet modern boutique with a playful touch featuring children's clothing, gifts, & accessories. My hope is that you always find what you came for and feel as inspired by our collections as we are.

2026-05-26 02:57 UTC
Microsoft April 2026 Patch Tuesday fixes 167 flaws, 2 zero-days

web:www.bleepingcomputer.com

Today is Microsoft's April 2026 Patch Tuesday with security updates for 167 flaws, including 2 zero-day vulnerabilities.

2026-05-26 02:57 UTC
CVE: Common Vulnerabilities and Exposures

web:www.cve.org

At cve .org, we provide the authoritative reference method for publicly known information-security vulnerabilities and exposures

2026-05-26 02:57 UTC
Fix Ferreterías

web:www.fixferreterias.com

FIX FERRETERÍAS inicia con la emisión de CFDI 4.0, si tienes una cuenta registrada es necesario que actualices tus datos fiscales: 1.-Inicia sesión 2.- Entra al apartado Mi Cuenta 3.- Dentro de Datos de Facturación da click en cambiar dirección de facturación y posteriormente en Guardar Dirección. Los datos obligatorios son: RFC

2026-05-26 02:57 UTC
Oracle Critical Patch Update Advisory - April 2026

web:www.oracle.com

Oracle Critical Patch Update Advisory - April 2026 Description A Critical Patch Update is a collection of patches for multiple security vulnerabilities. These patches address vulnerabilities in Oracle code and in third party components included in Oracle products. These patches are usually cumulative, but each advisory describes only the security patches added since the previous Critical Patch ...

2026-05-26 02:57 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2026-29962.json.

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "HSC MailInspector v5.3.3-7 contains a Local File Inclusion (LFI) vulnerability caused by improper control of user-supplied file paths. The endpoint /vendor/phpunit/phpunit.php processes user-controlled parameters that directly affect file access operations without adequate validation, sanitization, or path restriction. This allows a remote attacker to exploit Path Traversal techniques to read arbitrary files from the underlying operating system and application directories, leading to sensitive information disclosure."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-18T17:05:37.265Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://github.com/sql3t0/cve-disclosures"
        },
        {
          "url": "https://hsclabs.com/pt-br/mailinspector"
        },
        {
          "url": "https://github.com/sql3t0/cve-disclosures/blob/main/01_-_CVE-2026-29962_LFI%2BPath_Traversal.md"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-29962",
    "datePublished": "2026-05-18T00:00:00.000Z",
    "dateReserved": "2026-03-04T00:00:00.000Z",
    "dateUpdated": "2026-05-18T17:05:37.265Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}