mailcow Mailcow Dockerized Vulnerabilities
Mailcow Mailcow-dockerized vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Server-Side Template Injection Vulnerability in Mailcow by Mailcow
CVE-2025-53909MailcowMailcow-dockerized9.1CRITICALSecurity Flaw in Mailcow's Password Reset Feature Affects Users
CVE-2025-25198MailcowMailcow-dockerized7.1HIGHJavaScript Payload Injection Vulnerability in Dockerized Groupware/Email Suite
CVE-2024-41960MailcowMailcow-dockerized4.8MEDIUMUnauthorized JavaScript injection in API logs could lead to malicious actions and data theft
CVE-2024-41959MailcowMailcow-dockerized6.1MEDIUMBypass of 2FA Protection in Mailcow's Dockerized Groupware/Email Suite
CVE-2024-41958MailcowMailcow-dockerized👾🟡EPSS 14%7.2HIGHMailcow Vulnerability Affects Prior Versions, Patch Released
CVE-2024-30270MailcowMailcow-dockerized👾🟡EPSS 42%📰6.2MEDIUMMailcow Vulnerability Affects Prior Versions, Pose Significant Security Risk
CVE-2024-31204MailcowMailcow-dockerized📰6.1MEDIUMMailcow Docker Container Exposure to Local Network
CVE-2024-24760MailcowMailcow-dockerized👾🟡8.8HIGHmailcow ipixel flood attack leads to Denial of Service in admin page
CVE-2024-23824MailcowMailcow-dockerized4.7MEDIUMmailcow-dockerized XSS Vulnerability in Quarantine UI Allows Unauthorized Access and Data Manipulation
CVE-2023-49077mailcowmailcow-dockerized6.1MEDIUMManipulation of Internal Dovecot Variables in mailcow via crafted Passwords
CVE-2023-34108mailcowmailcow-dockerized8.8HIGHmailcow is vulnerable to shell command injection via xoauth2 authentication in imapsync
CVE-2023-26490MailcowMailcow-dockerized7.3HIGHmailcow-dockerized critical information misrepresentation can lead to phishing attacks through Swagger UI
CVE-2022-39258MailcowMailcow-dockerized8.1HIGHOS Command Injection in mailcow
CVE-2022-31138MailcowMailcow-dockerized👾🟡8.8HIGH
17 July 2025
12 February 2025
5 August 2024
4 April 2024
2 February 2024
30 November 2023
7 June 2023
4 March 2023
27 September 2022
11 July 2022
No more vulnerabilities to load.