Skip to content
OpenAdvisories

Vendor

mailcow

22 known vulnerabilities.

Products

mailcow-dockerized 22
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-125757 Public exploit

    mailcow: dockerized before 2026-11 Template Injection RCE via Domain-Wide Footer

    mailcow: dockerized before 2026-11 contains a server-side template injection vulnerability that allows domain administrators to execute commands in the shared rspamd container by storing a malicious domain-wide footer. Attackers can embed a Jinja macro with a…

    mailcow mailcow-dockerized