Vulnerabilities

Report: CVE-2026-42246 - net-imap vulnerable to STARTTLS stripping via invalid response timing - Complete Guide

2026-05-10 0 views admin

CVE ID :CVE-2026-42246 Published : May 9, 2026, 8:16 p.m. | 1 hour, 39 minutes ago Description :Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAP#starttls to return

CVE Details

CVE ID

CVE-2026-42246

Published

May 9, 2026

🏷️ Tags

report42246vulnerablestarttlsstrippinginvalidresponsetimingcompleteguide

InfinitSec - Latest Cybersecurity, Technology & Gaming News

Report: CVE-2026-42246 - net-imap vulnerable to STARTTLS stripping via invalid response timing - Complete Guide

CVE Details

🏷️ Tags

More from Vulnerabilities

Report: CVE-2026-8214 - Industrial Application Software IAS Canias ERP RMI doAction improper authentication - Complete Guide

Report: CVE-2026-8215 - Industrial Application Software IAS Canias ERP RMI iasRequestFileEvent path trave

Report: CVE-2026-8216 - Industrial Application Software IAS Canias ERP Java RMI Session Management iasSer

Report: CVE-2026-45182 - GrapheneOS Quic VPN IP Disclosure

Trending

CVE-2025-61481: Critical Remote Code Execution Vulnerability in MikroTik RouterOS & SwitchOS

CVE-2025-43939: Dell Unity OS Command Injection (High)

Google disputes false claims of massive Gmail data breach

Microsoft: DNS outage impacts Azure and Microsoft 365 services

3.5B Accounts, 1 Critical Flaw: Meta Closes WhatsApp Data-Harvesting