Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-115390. PoCs published by John Smith.
AI-analyzed exploit summary This Ruby script exploits a buffer overflow vulnerability in hMailServer 5.3.3's IMAP service by sending an overly long username during login, causing a crash. The PoC demonstrates a denial-of-service (DoS) condition by corrupting memory, making the service inaccessible.
Description
hMAilServer 5.3.3 - IMAP Remote Crash (PoC)
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by John Smith · rubydoswindows
https://www.exploit-db.com/exploits/22302
This Ruby script exploits a buffer overflow vulnerability in hMailServer 5.3.3's IMAP service by sending an overly long username during login, causing a crash. The PoC demonstrates a denial-of-service (DoS) condition by corrupting memory, making the service inaccessible.
Classification
Working Poc 95%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target:
hMailServer 5.3.3 - Build 1879
No auth needed
Prerequisites:
Network access to the IMAP service (port 143) · hMailServer with default or vulnerable settings
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026