agentprime: mailcow-dockerizedEvery new CVE for mailcow-dockerized.https://agentprime.io/CVE-2026-7460: mailcow-dockerized 2026-03b - Stored XSS in Queue Manager via unescapedhttps://agentprime.io/advisories/CVE-2026-7460/https://agentprime.io/advisories/CVE-2026-7460/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 02:19:07 GMTCVECVE-2026-40878: mailcow-dockerized Login Page has Reflected Parameter Injection / Wrong-Context XSS Escapinghttps://agentprime.io/advisories/CVE-2026-40878/https://agentprime.io/advisories/CVE-2026-40878/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 19:21:56 GMTCVECVE-2026-40875: mailcow: dockerized vulnerable to stored XSS in user login history real_riphttps://agentprime.io/advisories/CVE-2026-40875/https://agentprime.io/advisories/CVE-2026-40875/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 19:19:55 GMTCVECVE-2026-40874: mailcow: dockerized missing authorization on Forwarding Hosts delete actionhttps://agentprime.io/advisories/CVE-2026-40874/https://agentprime.io/advisories/CVE-2026-40874/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 19:17:45 GMTCVECVE-2026-40873: mailcow: dockerized vulnerable to stored XSS in Quarantine attachment filenameshttps://agentprime.io/advisories/CVE-2026-40873/https://agentprime.io/advisories/CVE-2026-40873/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 19:15:39 GMTCVECVE-2026-40872: mailcow: dockerized vulnerable to stored XSS in autodiscover logs email address fieldhttps://agentprime.io/advisories/CVE-2026-40872/https://agentprime.io/advisories/CVE-2026-40872/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 19:14:45 GMTCVEcriticalCVE-2026-40871: mailcow: dockerized vulnerable to Second Order SQL Injection in quarantine category via APIhttps://agentprime.io/advisories/CVE-2026-40871/https://agentprime.io/advisories/CVE-2026-40871/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 19:12:52 GMTCVECVE-2025-53909: mailcow: dockerized vulnerable to SSTI in Quota and Quarantine Notification Templatehttps://agentprime.io/advisories/CVE-2025-53909/https://agentprime.io/advisories/CVE-2025-53909/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Jul 2025 13:47:26 GMTCVEcriticalCVE-2025-25198: mailcow: dockerized vulnerable to password reset poisoninghttps://agentprime.io/advisories/CVE-2025-25198/https://agentprime.io/advisories/CVE-2025-25198/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Feb 2025 17:46:06 GMTCVECVE-2024-41960: Cross-site Scripting (XSS) via Relay Hosts Configuration in mailcow: dockerizedhttps://agentprime.io/advisories/CVE-2024-41960/https://agentprime.io/advisories/CVE-2024-41960/CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Aug 2024 19:59:48 GMTCVECVE-2024-41959: Cross-site Scripting (XSS) via API Logs in mailcow: dockerizedhttps://agentprime.io/advisories/CVE-2024-41959/https://agentprime.io/advisories/CVE-2024-41959/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Aug 2024 19:59:46 GMTCVECVE-2024-41958: Two-Factor Authentication (2FA) Bypass in mailcow: dockerizedhttps://agentprime.io/advisories/CVE-2024-41958/https://agentprime.io/advisories/CVE-2024-41958/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Aug 2024 19:59:44 GMTCVECVE-2024-31204: mailcow Cross-site Scripting Vulnerability via Exception Handlerhttps://agentprime.io/advisories/CVE-2024-31204/https://agentprime.io/advisories/CVE-2024-31204/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Apr 2024 20:37:45 GMTCVECVE-2024-30270: mailcow Path Traversal and Arbitrary Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-30270/https://agentprime.io/advisories/CVE-2024-30270/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Apr 2024 20:27:40 GMTCVECVE-2024-24760: Mailcow Docker Container Exposure to Local Networkhttps://agentprime.io/advisories/CVE-2024-24760/https://agentprime.io/advisories/CVE-2024-24760/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Feb 2024 15:28:22 GMTCVECVE-2024-23824: mailcow ipixel flood attack leads to Denial of Service in admin pagehttps://agentprime.io/advisories/CVE-2024-23824/https://agentprime.io/advisories/CVE-2024-23824/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Feb 2024 15:18:55 GMTCVECVE-2023-49077: mailcow-dockerized XSS Vulnerability in Quarantine UI Allows Unauthorized Access and Data Manipulationhttps://agentprime.io/advisories/CVE-2023-49077/https://agentprime.io/advisories/CVE-2023-49077/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Nov 2023 07:14:04 GMTCVECVE-2023-34108: Manipulation of Internal Dovecot Variables in mailcow via crafted Passwordshttps://agentprime.io/advisories/CVE-2023-34108/https://agentprime.io/advisories/CVE-2023-34108/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Jun 2023 17:16:54 GMTCVECVE-2023-26490: mailcow is vulnerable to shell command injection via xoauth2 authentication in imapsynchttps://agentprime.io/advisories/CVE-2023-26490/https://agentprime.io/advisories/CVE-2023-26490/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Mar 2023 23:37:03 GMTCVECVE-2022-39258: mailcow-dockerized critical information misrepresentation can lead to phishing attacks through Swagger UIhttps://agentprime.io/advisories/CVE-2022-39258/https://agentprime.io/advisories/CVE-2022-39258/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Sep 2022 15:10:10 GMTCVECVE-2022-31138: OS Command Injection in mailcowhttps://agentprime.io/advisories/CVE-2022-31138/https://agentprime.io/advisories/CVE-2022-31138/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 Jul 2022 14:00:15 GMTCVE