CVE-2019-6800: Titanhq Spamtitan

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

In TitanHQ SpamTitan through 7.03, a vulnerability exists in the spam rule update function. Updates are downloaded over HTTP, including scripts which are subsequently executed with root permissions. An attacker with a privileged network position is trivially able to inject arbitrary commands.

Affected products

  • Titanhq Spamtitan: from 7.00, up to and including 7.03

Published 2019-06-05. Last modified 2026-06-17.