Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.
Loading...
Loading...
Score 3.7 from GitHub Security Advisory (severity: LOW) published 2026-05-04. NVD baseline CVSS 3.7; sources differ by 0.0.
Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.
May 4, 2026
May 11, 2026
These vendors published their own advisory mentioning this CVE — often with vendor-specific remediation steps + affected product lists not in NVD.
See which npm, PyPI, Go, and Maven packages are affected by CVE-2026-43964
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.