vulnerability

FreeBSD: (Multiple Advisories) (CVE-2018-14354)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

Published

Jul 17, 2018

Added

Jul 20, 2018

Modified

Jun 15, 2026

Description

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with a manual subscription or unsubscription.

Solutions

freebsd-upgrade-package-muttfreebsd-upgrade-package-neomuttfreebsd-upgrade-package-mutt14

References

CVE-2018-14354
https://attackerkb.com/topics/CVE-2018-14354
CWE-78
EUVD-EUVD-2018-6275
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-6275

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report