{"metadata": {"vulnerability": "CVE-2026-100741", "count": 20, "kinds": {"milestone": 4, "sighting": 8, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-09-26T09:56:20.241Z", "date_only": false, "value": "2026-09-26T09:56:20.241Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-100741", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-26T23:16:26Z", "date_only": false, "value": "2026-09-26T23:16:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-100741", "record": "CVE-2026-100741", "field": "creation_timestamp", "uuid": "0c11b5c7-189b-45cd-aa76-9a12da9ea2b9", "url": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-100741"}, {"timestamp": "2026-09-27T07:12:54.503Z", "date_only": false, "value": "2026-09-27T07:12:54.503Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-100741", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-27T07:12:54.503Z", "date_only": false, "value": "2026-09-27T07:12:54.503Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitLab", "record": "CVE-2026-100741", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-27T08:16:26Z", "date_only": false, "value": "2026-09-27T08:16:26Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V6J4-P35G-MQ6P", "record": "GHSA-V6J4-P35G-MQ6P", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-27T08:16:26.813Z", "date_only": false, "value": "2026-09-27T08:16:26.813", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-100741", "record": "FKIE_CVE-2026-100741", "field": "published"}, {"timestamp": "2026-09-27T08:52:08.615Z", "date_only": false, "value": "2026-09-27T08:52:08.615744Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jkybfciwm6lms", "record": "CVE-2026-100741", "field": "creation_timestamp", "uuid": "50e7a42e-48cb-4d5c-92ed-8cef569945a2", "content": "CVE-2026-100741 - Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in hMailServer\nCVE ID : CVE-2026-100741\n \n Published : Sept. 27, 2026, 7:12 a.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : Eval injection in the JScript event-script dispatc...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/jkybfciwm6lms"}, {"timestamp": "2026-09-27T09:00:26.809Z", "date_only": false, "value": "2026-09-27T09:00:26.809490Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117342183490068095", "record": "cve-2026-100741", "field": "creation_timestamp", "uuid": "514e892d-3ad5-47d6-b403-1aa925588570", "content": "CVE-2026-100741: CRITICAL eval injection in hMailServer (Windows, 6.0.0 \u2013 6.3.3) enables remote code execution via JScript event scripting. Requires non-default config. Disable event scripting/JScript now. https://radar.offseq.com/threat/cve-2026-100741-cwe-95-improper-neutralization-of-directives-in-dynamically-evaluated-code-eval-a98d3d387bf12b13 #OffSeq #Vulnerability #CyberSec #CVE #hMailServer", "url": "https://infosec.exchange/users/offseq/statuses/117342183490068095"}, {"timestamp": "2026-09-27T09:00:29.843Z", "date_only": false, "value": "2026-09-27T09:00:29.843710Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwigr67sri24", "record": "cve-2026-100741", "field": "creation_timestamp", "uuid": "f8f407be-1ba0-4f76-9dd2-f8c040d29e9f", "content": "CRITICAL vulnerability in hMailServer (Windows, v6.0.0 \u2013 6.3.3): CVE-2026-100741 allows remote unauth RCE via JScript event scripting. Disable event scripting/JScript to mitigate. https://radar.offseq.com/threat/cve-2026-100741-cwe-95-improper-neutralization-of-directives-in-dynamically-evaluated...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mwigr67sri24"}, {"timestamp": "2026-09-27T09:31:10Z", "date_only": false, "value": "2026-09-27T09:31:10Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V6J4-P35G-MQ6P", "record": "GHSA-V6J4-P35G-MQ6P", "field": "published"}, {"timestamp": "2026-09-27T09:31:10Z", "date_only": false, "value": "2026-09-27T09:31:10Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V6J4-P35G-MQ6P", "record": "GHSA-V6J4-P35G-MQ6P", "field": "modified"}, {"timestamp": "2026-09-27T10:07:05.955Z", "date_only": false, "value": "2026-09-27T10:07:05.955892Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwikicqod32y", "record": "CVE-2026-100741", "field": "creation_timestamp", "uuid": "412f5483-a808-4ec4-83be-b5778ee6f14f", "content": "\ud83d\udea8 CVE-2026-100741 \u2014 CVSS 9.8 CRITICAL\n\nEval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100741\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mwikicqod32y"}, {"timestamp": "2026-09-27T12:00:40Z", "date_only": false, "value": "2026-09-27T12:00:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ichintu/295c47a4fdd1542fe1dda3872969c6bd", "record": "CVE-2026-100741", "field": "creation_timestamp", "uuid": "ce89a588-cb8f-4bb0-b254-2758cfd49a55", "content": "This daily threat intelligence update covers emerging AI security practices and critical software vulnerabilities:\n\n\u2022 **AI Guardrails:** Teams are developing adaptable, general-purpose proxy-layer frameworks to detect LLM threats like prompt injection and jailbreaks. Implementation faces a trade-off between evaluation metrics and documented capabilities, particularly regarding jailbreak detection and language support.\n\n\u2022 **wolfSSL (3 HIGH/8.3 CVEs):** Multiple flaws undermine TLS/DTLS certificate verification and authentication. Issues include ignoring public keys in trusted peer validation (CVE-2026-93302), accepting unsolicited RawPublicKey certificates (CVE-2026-89136), and incorrectly validating OCSP stapling issuers (CVE-2026-89102), all enabling authentication bypasses and certificate forgery.\n\n\u2022 **hMailServer (CRITICAL/9.8):** An Eval Injection vulnerability (CVE-2026-100741) allows unauthenticated remote code execution via JScript event scripting when exploited through specific SMTP/POP3/IMAP login sequences.\n\n\u2022 **Citrix NetScaler:** Two unpatched zero-day RCE flaws are actively exploited in the wild, prompting some administrators to preemptively take affected appliances offline.", "url": "https://gist.github.com/ichintu/295c47a4fdd1542fe1dda3872969c6bd"}, {"timestamp": "2026-09-28T00:45:54.935Z", "date_only": false, "value": "2026-09-28T00:45:54.935901Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwk3lpgtsy2d", "record": "CVE-2026-100741", "field": "creation_timestamp", "uuid": "6259f332-d706-49f0-927b-f4a360df8ba8", "content": "\ud83d\udd34 CVE-2026-100741 - Critical (9.8)\n\nEval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, ver...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100741/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwk3lpgtsy2d"}, {"timestamp": "2026-09-28T04:20:11.546Z", "date_only": false, "value": "2026-09-28T04:20:11.546873Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwkhkvwo4i2u", "record": "CVE-2026-100741", "field": "creation_timestamp", "uuid": "9ea3862f-2583-48e5-a99f-163a23d9d271", "content": "CVE-2026-100741\nVersions 6.0.0 through 6.3.3 of hMailServer on Windows can run any script if an attacker sends a specially formed password containing a backslash and an apostrophe. This requires event scripting to be enabled\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mwkhkvwo4i2u"}, {"timestamp": "2026-09-28T12:55:48.801Z", "date_only": false, "value": "2026-09-28T12:55:48.801629Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-100741", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-28T12:55:48.801Z", "date_only": false, "value": "2026-09-28T12:55:48.801629Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-100741", "record": "FKIE_CVE-2026-100741", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-28T13:31:30.984Z", "date_only": false, "value": "2026-09-28T13:31:30.984Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-100741", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-28T13:31:30.984Z", "date_only": false, "value": "2026-09-28T13:31:30.984Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-100741", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-29T21:36:39.547Z", "date_only": false, "value": "2026-09-29T21:36:39.547", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-100741", "record": "FKIE_CVE-2026-100741", "field": "lastModified"}]}