{"uuid": "514e892d-3ad5-47d6-b403-1aa925588570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100741", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117342183490068095", "content": "CVE-2026-100741: CRITICAL eval injection in hMailServer (Windows, 6.0.0 \u2013 6.3.3) enables remote code execution via JScript event scripting. Requires non-default config. Disable event scripting/JScript now. https://radar.offseq.com/threat/cve-2026-100741-cwe-95-improper-neutralization-of-directives-in-dynamically-evaluated-code-eval-a98d3d387bf12b13 #OffSeq #Vulnerability #CyberSec #CVE #hMailServer", "creation_timestamp": "2026-09-27T09:00:26.809490Z"}