What’s Vulnerable › Vulnerabilities

CVE-2024-55560

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-12-08 · updated 2026-06-17

Description

MailCleaner before 28d913e has default values of ssh_host_dsa_key, ssh_host_rsa_key, and ssh_host_ed25519_key that persist after installation.

Affected products

• MailCleaner: before 28d913e — fixed in 28d913e

How to fix

Upgrade to a fixed version: MailCleaner 28d913e. Check the vendor advisory for mitigations.

References

• https://github.com/MailCleaner/MailCleaner/commit/28d913eaa044b689eb114f72ebe92d48cb4aaca7
• https://github.com/MailCleaner/MailCleaner/wiki/Watchdogs#host_keys
• https://www.mailcleaner.net/infobox/mc-info-box.php

Get alerted when CVE-2024-55560 or the next vulnerability affects your stack