sagredo qmail before 2026.04.07 allows tls_quit remote code execution because of popen in notlshosts_auto in qmail-remote.c.
| Vendor | Product | Versions |
|---|---|---|
| sagredo | qmail | 2024.10.26 |
Marked exploitAvailable as true based on new information from the article.
Updated severity to CRITICAL, affected versions to 2026.04.06, and noted that the vulnerability is actively exploited.
Initial creation