CVE-2026-123620

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 6, 2026

Last Seen

November 6, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

High-Risk OS Command Injection Vulnerability in Usermin Disclosed64.5

An OS command injection vulnerability (CVE-2026-123620) has been identified in Usermin version 2.570, affecting its Read Mail module. This flaw allows authenticated users to execute arbitrary commands by exploiting unsanitized IMAP folder names. Attackers can create folders with shell metacharacters...