CVE-2026-39820 Quadratic string concatentation in consumeComment in net/mail Information published. EPSS 0.01 CVE-2026-39820 US Microsoft Security · 19. 5. 10:44