Missing Authentication in HGiga's C&Cm@il Vulnerability Exposes User Mail Content
CVE-2026-2234

9.3CRITICAL

Key Information:

Vendor

Hgiga

Status
C&cm@il Package Olln-base
Vendor
CVE Published:
9 February 2026

What is CVE-2026-2234?

A vulnerability in HGiga's C&Cm@il allows unauthenticated remote attackers to gain unauthorized access to users' emails, potentially leading to reading and modifying any user's mail content. This poses significant risks to email integrity and user privacy, making it imperative for users and administrators to ensure their systems are updated to mitigate this threat effectively.

Affected Version(s)

C&Cm@il package olln-base 0 < 7.0-978

References

https://www.twcert.org.tw/tw/cp-132-10703-3d02f-1.html
third-party-advisory
https://www.twcert.org.tw/en/cp-139-10704-d5aba-2.html
third-party-advisory

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.