CVE-2026-23829

This repository contains a functional exploit for CVE-2026-23829, a CRLF injection vulnerability in Mailpit's SMTP server. The exploit demonstrates the vulnerability and includes a novel phase-based reconstruction technique to recover the original SMTP command from corrupted logs.

This repository contains a functional exploit for CVE-2026-23829, a CRLF injection vulnerability in Mailpit's SMTP server, combined with a novel phase-based reconstruction technique using Convergent Time Theory (CTT). The exploit demonstrates both the vulnerability and a method to recover corrupted data.

This PoC exploits CVE-2026-23829 in Mailpit SMTP Server by leveraging header injection to achieve RCE, with additional features like temporal resonance and worm propagation. The exploit uses SMTP protocol manipulation and embedded payloads to execute commands and establish persistence.