Skip to content
OpenAdvisories

Vendor

mailcow

22 known vulnerabilities.

Products

mailcow-dockerized 22
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2025-25198 Public exploit

    mailcow: dockerized vulnerable to password reset poisoning

    mailcow: dockerized is an open source groupware/email suite based on docker. Prior to version 2025-01a, a vulnerability in mailcow's password reset functionality allows an attacker to manipulate the `Host HTTP` header to generate a password reset link pointin…

    mailcow mailcow-dockerized
  • High 8.8
    CVE-2024-24760 Public exploit

    Mailcow Docker Container Exposure to Local Network

    mailcow is a dockerized email package, with multiple containers linked in one bridged network. A security vulnerability has been identified in mailcow affecting versions < 2024-01c. This vulnerability potentially allows attackers on the same subnet to connect…

    mailcow mailcow-dockerized
  • High 8.8
    CVE-2022-31138 Public exploit

    OS Command Injection in mailcow

    mailcow is a mailserver suite. Prior to mailcow-dockerized version 2022-06a, an extended privilege vulnerability can be exploited by manipulating the custom parameters regexmess, skipmess, regexflag, delete2foldersonly, delete2foldersbutnot, regextrans2, pipe…

    mailcow mailcow-dockerized