A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.

suse_linux SUSE-SU-2026:4604-1: SUSE SLED15 / SLES15 : Security update for fetchmail (Important) (SUSE-SU-2026:4604-1)

suse_linux SUSE-SU-2026:4605-1: SUSE SLES15 : Security update for fetchmail (Important) (SUSE-SU-2026:4605-1)

The version of fetchmail installed on the remote host is prior to 6.3.24-7. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3981 advisory.

    A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or     compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes     fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead     to remote code execution depending on stack-frame layout, or to authentication failure or process     termination under memory hardening. (CVE-2026-94184)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3186 advisory.

    A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or     compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes     fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead     to remote code execution depending on stack-frame layout, or to authentication failure or process     termination under memory hardening. (CVE-2026-94184)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4567-1 advisory.

    This update for fetchmail fixes the following issue:

    - CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or     process       termination (bsc#1282055).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ffdc059b16 advisory.

    Update to fetchmail-6.6.8 (CVE-2026-94184)

    ----

    Update to fetchmail-6.6.7

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fdb231ab53 advisory.

    Update to fetchmail-6.6.8 (CVE-2026-94184)

    ----

    Update to fetchmail-6.6.7

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8ffc03a2ce advisory.

    Update to fetchmail-6.6.8 (CVE-2026-94184)

    ----

    Update to fetchmail-6.6.7

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 15e880b4-b9ed-11f1-b17e-3c7c3fba4204 advisory.

    Fetchmail reports:
    [CVE-2026-94184]: Fetchmail's NTLM authentication client can in some cases be susceptible to a remote code     execution from a malicious server when fetchmail is configured with the NTLM feature enabled, depending on     build details. fetchmail 6.6.7 release candidates, 6.6.7 and subsequent releases are unaffected.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or     compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes     fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead     to remote code execution depending on stack-frame layout, or to authentication failure or process     termination under memory hardening. (CVE-2026-94184)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
365244	Amazon Linux 2 : fetchmail (ALAS-2026-3981)	Nessus	Amazon Linux Local Security Checks	Local	medium
365241	Amazon Linux 2023 : fetchmail (ALAS2023-2026-3186)	Nessus	Amazon Linux Local Security Checks	Local	medium
364322	SUSE SLES12 Security Update : fetchmail (SUSE-SU-2026:4567-1)	Nessus	SuSE Local Security Checks	Local	medium
362831	Fedora 44 : fetchmail (2026-ffdc059b16)	Nessus	Fedora Local Security Checks	Local	medium
362828	Fedora 43 : fetchmail (2026-fdb231ab53)	Nessus	Fedora Local Security Checks	Local	medium
362711	Fedora 45 : fetchmail (2026-8ffc03a2ce)	Nessus	Fedora Local Security Checks	Local	medium
350846	FreeBSD : Fetchmail -- NTLM potential remote code execution (15e880b4-b9ed-11f1-b17e-3c7c3fba4204)	Nessus	FreeBSD Local Security Checks	Local	medium
348663	Linux Distros Unpatched Vulnerability : CVE-2026-94184	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-94184

high

Tenable Plugins

Coming Soon

medium

medium

medium

medium

medium

medium

medium

medium