CVE record · 1 source
CVE-2026-126135
If an attacker was able to perform a man-in-the-middle attack on an SMTP or POP3 server connection using STARTTLS, the attacker could inject server…
- Vendor
- Mozilla
- Product
- Thunderbird
- Exposure class
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
If an attacker was able to perform a man-in-the-middle attack on an SMTP or POP3 server connection using STARTTLS, the attacker could inject server…
If an attacker was able to perform a man-in-the-middle attack on an SMTP or POP3 server connection using STARTTLS, the attacker could inject server responses before the TLS handshake completed. Thunderbird would process these…