Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2026-43860

mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest.