On 2023-12-18, the SEC Consult team published a security issue affecting many SMTP implementations. The problem results in some attack vectors bypassing important antispam/antispoofing mechanisms. This can cause major problems as mails can be injected into the mail flow that appear to come from a valid trusted source.

It …