CVE-2026-44742
HIGH
NVD
CVSS Score
7.2
Severity
HIGH
Published
May 07, 2026
Vendor
unknown
Description
Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026.