EIP-2026-114779

This exploit demonstrates a mail relay bypass in Amavis-ng 0.1.6.x by manipulating the 'To' field in an SMTP session, allowing an attacker to send emails to unauthorized recipients. The PoC uses a manual telnet session to exploit improper interaction between Amavis-ng and Postfix.