What’s Vulnerable › Products

PunchIn-App punchin-email vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your PunchIn-App punchin-email version is affected

Latest PunchIn-App punchin-email vulnerabilities

• CVE-2026-54649 — punchin-email: Operator inbox (FORWARD_TO) disclosed to correspondents on reply — Cloudflare forward() drops the relay Reply-To (CVSS 2.1)