Skip to content
OpenAdvisories

Vendor

Mailu

5 known vulnerabilities.

Products

Mailu 5 helm-charts 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-85751

    Mailu: Authentication bypass in header-based proxy authentication via spoofable `X-Forwarded-By` trust

    Mailu is a mail server distributed as a set of Docker images. From Mailu 2.0 until 2024.06.55 and prior to Mailu helm-charts 2.7.3, deployments with PROXY_AUTH_WHITELIST configured but REAL_IP_HEADER unset trusted a client-controlled X-Forwarded-By header for…

    Mailu Mailu helm-charts