Skip to content
OpenAdvisories

Vendor

mailcow

22 known vulnerabilities.

Products

mailcow-dockerized 22
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.1
    CVE-2026-40878 Scanner template

    mailcow-dockerized Login Page has Reflected Parameter Injection / Wrong-Context XSS Escaping

    mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, the mailcow web interface passes the raw `$_SERVER['REQUEST_URI']` to Twig as a global template variable and renders it inside a JavaScript string lite…

    mailcow mailcow-dockerized
  • Low 3.8
    CVE-2024-41960

    Cross-site Scripting (XSS) via Relay Hosts Configuration in mailcow: dockerized

    mailcow: dockerized is an open source groupware/email suite based on docker. An authenticated admin user can inject a JavaScript payload into the Relay Hosts configuration. The injected payload is executed whenever the configuration page is viewed, enabling t…

    mailcow mailcow-dockerized