Security Advisory
CVE-2025-52373
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file.