CVE-2024-55560: Mailcleaner

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

MailCleaner before 28d913e has default values of ssh_host_dsa_key, ssh_host_rsa_key, and ssh_host_ed25519_key that persist after installation.

Affected products

• Mailcleaner Mailcleaner: before 28d913e (fixed in 28d913e)

Published 2024-12-08. Last modified 2026-06-17.