CVE-2025-52372: Hmailserver

Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information via the hmailserver/installation/hMailServerInnoExtension.iss and hMailServer.ini components.

Affected products

• Hmailserver Hmailserver: version 5.6.9 only; version 5.8.6 only

Published 2025-07-21. Last modified 2026-06-17.