f
fetchmail
Security Risk Profile
37
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 31 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 2, 2001 to present
31
Total CVEs
10
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
6.1
Base severity
Avg EPSS
1%
Exploit probability
Unpatched
2
Critical/High
Risk Level
37/100
low
Severity Distribution
Critical
2High
8Medium
15Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
7
2
Input Validation
7
3
Null Pointer Dereference
1
4
Infoleak
1
Most Affected Products
1. Fetchmail Fetchmail1472
2. Fedoraproject Fedora5
Recent Vulnerabilities
See more →https://seclists.org/oss-sec/2026/q3/880
unknown
CVE-2026-94184: some builds of fetchmail 6.6.6 and older vulnerable to mote code execution in NTLM authentication client (vised fetchmail-SA-2026-01)
Sep 23, 2026🔧 No Patch
CVE-2026-94184
CVSS 8.1EPSS 1%high
Fetchmail: fetchmail: stack-based buffer overflow in ntlm authentication (fetchmail-sa-2026-01)
Sep 21, 2026🔧 No Patch
REDHAT-BUG-2537395
CVSS 4.0medium
Sep 21, 2026🔧 No Patch
https://seclists.org/oss-sec/2025/q4/10
unknown
fetchmail-SA-2025-01: SMTP AUTH denial of service now called CVE-2025-61962.
Oct 4, 2025🔧 No Patch
CVE-2025-61962
CVSS 5.9medium
fetchmail-SA-2025-01: SMTP AUTH denial of service now called CVE-2025-61962.
Oct 4, 2025🔧 No Patch
https://seclists.org/oss-sec/2025/q4/7
unknown
fetchmail-SA-2025-01: SMTP AUTH denial of service
Oct 3, 2025🔧 No Patch
CVE-2021-39272
CVSS 5.9medium
Aug 30, 2021🔧 No Patch
CVE-2021-36386
CVSS 7.5high
Jul 29, 2021
CVE-2012-3482
CVSS 5.8medium
Dec 21, 2012
CVE-2011-1947
CVSS 5.0medium
Jun 2, 2011🔧 No Patch
Monitor fetchmail in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.