Home

Description

An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request.

PUBLISHED Reserved 2026-06-07 | Published 2026-06-15 | Updated 2026-06-16 | Assigner mitre

References

gist.github.com/pyuysig/4013f4f10f74b3fded7ddf41b6d36ae5 exploit

gist.github.com/pyuysig/4013f4f10f74b3fded7ddf41b6d36ae5

cve.org (CVE-2026-50880)

nvd.nist.gov (CVE-2026-50880)

Download JSON