CVE-2026-43860

LOW NVD

CVSS Score 3.7

Severity LOW

Published May 04, 2026

Vendor unknown

Description

mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest.