CVE-2026-50880: YouTransfer has an issue in the sendmail transport integration that allows arbitrary code execution

Severity: Critical

CVSS Score: 9.8

An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request.