← العودة للجدول
CVE-2026-7666
CVE-2026-7666 — VulnCheck: An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.
📅 2026-06-03
🟢 Low 🔥 No VulnCheck Exploit Vulnerability CVSS 3.1

📋 الوصف الكامل

An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. `django.core.mail.backends.smtp.EmailBackend` in Django fails to prevent reuse of a partially-initialized connection after a failed `STARTTLS` handshake when `fail_silently=True`, which allows on-path network attackers to read email content via cleartext interception. Earlier, unsupported Django series (such as 5.0.x, 4.1.x,

💻 الأنظمة المتأثرة

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2026-7666

📡 المصدر

VulnCheck

✅ الحلول والتخفيف

Refer to CVE-2026-7666 NVD advisory

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←