CVE-2022-35223: Easyuse Mailhunter Ultimate

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

EasyUse MailHunter Ultimate’s cookie deserialization function has an inadequate validation vulnerability. Deserializing a cookie containing malicious payload will trigger this insecure deserialization vulnerability, allowing an unauthenticated remote attacker to execute arbitrary code, manipulate system command or interrupt service.

Affected products

• Easyuse Mailhunter Ultimate: up to and including 2020

Published 2022-08-02. Last modified 2026-06-17.