agentprime: bulwarkmail-webmailEvery new CVE for bulwarkmail-webmail.https://agentprime.io/CVE-2026-113728: Bulwark Webmail: DNS-rebinding SSRF in public iCalendar fetch endpointhttps://agentprime.io/advisories/CVE-2026-113728/https://agentprime.io/advisories/CVE-2026-113728/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 21:12:38 GMTCVECVE-2026-35391: Bulwark Webmail getClientIP() trusted client-controlled X-Forwarded-For value, enabling rate limit bypass and audit log forgeryhttps://agentprime.io/advisories/CVE-2026-35391/https://agentprime.io/advisories/CVE-2026-35391/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 20:17:39 GMTCVECVE-2026-35390: Content-Security-Policy was set to Report-Only mode, failing to block XSS attackshttps://agentprime.io/advisories/CVE-2026-35390/https://agentprime.io/advisories/CVE-2026-35390/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 20:13:30 GMTCVECVE-2026-35389: Bulwark Webmail S/MIME signature verification accepted self-signed certificateshttps://agentprime.io/advisories/CVE-2026-35389/https://agentprime.io/advisories/CVE-2026-35389/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 20:11:56 GMTCVECVE-2026-34834: Bulwark Webmail: Authentication Bypass in verifyIdentity() due to missing cookie validationhttps://agentprime.io/advisories/CVE-2026-34834/https://agentprime.io/advisories/CVE-2026-34834/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Apr 2026 19:11:54 GMTCVECVE-2026-34833: Bulwark Webmail: Information Exposure: password returned in /api/auth/sessionhttps://agentprime.io/advisories/CVE-2026-34833/https://agentprime.io/advisories/CVE-2026-34833/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Apr 2026 19:11:39 GMTCVE