CVE-2026-4873
A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text (via IMAP, SMTP, or POP3), a subsequent request to that same host bypasses the TLS requirement and instead transmit data unencrypted.
Versions it affects
Software versions checked with the free lookup that CVE-2026-4873 applies to, and the release that fixes it where the sources name one.
Is this running somewhere in your estate?
The Vulnerability Reporter inventories every machine and tells you when an advisory like this one applies to you.