Mailpit CVE-2026-21859 ssrf

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2026-21859
• https://github.com/axllent/mailpit/security/advisories/GHSA-8v65-47jx-7mfr
• https://www.crowdsec.net/vulntracking-report/cve-2026-21859
• https://www.miggo.io/vulnerability-database/cve/CVE-2026-21859
• https://access.redhat.com/security/cve/cve-2026-21859
• https://www.sentinelone.com/vulnerability-database/cve-2026-21859/
• https://rosecurify.com/advisories/RO-26-001-mailpit-server-side-request-forgery-ssrf/
• https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21859.yaml
• https://pentest-tools.com/vulnerabilities-exploits/mailpit-1283-server-side-request-forgery_28699
• https://advisories.gitlab.com/pkg/golang/github.com/axllent/mailpit/CVE-2026-21859/

Related Vulnerabilities

• PoCCVE-2026-23829: Mailpit < 1.28.2 - SMTP CRLF Injection
• Mailpit /proxy 服务器端请求伪造漏洞（CVE-2026-21859）
• PoCCVE-2026-21859: Mailpit < 1.28.3 - Server-Side Request Forgery