m
mutt
Security Risk Profile
17
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 63 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 28, 1998 to present
63
Total CVEs
23
Critical+High
0
Exploited
5
Unpatched
Threat Assessment
Avg CVSS
6.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
5
Critical/High
Risk Level
17/100
low
🆕 1Fresh (<7d)📈 2 in Last 30 Days
Severity Distribution
Critical
12High
11Medium
21Low
13Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
3Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
16
2
Null Pointer Dereference
3
3
Input Validation
3
4
Path Traversal
2
5
OS Command Injection
2
Most Affected Products
1. Mutt Mutt166
2. Canonical Ubuntu Linux45
3. Debian Debian Linux44
4. debian/mutt29
5. neomutt neomutt21
Recent Vulnerabilities
See more →https://seclists.org/oss-sec/2026/q4/123
unknown
mutt 2.4.3 leased, fixes CVE-2026-107570
Oct 9, 2026🔧 No Patch
CVE-2026-107570
CVSS 2.5low
Use of Out-of-range Pointer Offset in mutt
Oct 8, 2026🔧 No Patch
CVE-2026-43864
CVSS 2.5low
May 4, 2026🔧 No Patch
CVE-2026-43863
CVSS 3.7low
May 4, 2026🔧 No Patch
CVE-2026-43862
CVSS 3.7low
May 4, 2026🔧 No Patch
CVE-2026-43861
CVSS 3.7low
May 4, 2026🔧 No Patch
CVE-2026-43860
CVSS 3.7low
May 4, 2026🔧 No Patch
CVE-2026-43859
CVSS 3.7low
May 4, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q2/371
unknown
Fwd: mutt 2.3.2 leased
May 4, 2026🔧 No Patch
CVE-2024-49395
CVSS 5.3EPSS 0%medium
Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block
Nov 11, 2024🔧 No Patch
Monitor mutt in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.