CVE Tools
Track your stack

Mailcow

6 CVEs tracked since 2026. Since Apr 2026, none of them reached CISA KEV.

Mailcow CVEs per month

Apr 2026 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Mailcow CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-0460
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Mailcow's monthly top three, with their CVEs summed over those months.

  1. Mailcow-dockerized61 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Mailcow.

  1. CVE-2026-7460mailcow-dockerized 2026-03b - Stored XSS in Queue Manager via unescaped—
  2. CVE-2026-40878mailcow-dockerized Login Page has Reflected Parameter Injection / Wrong-Context XSS Escaping—
  3. CVE-2026-40875mailcow: dockerized vulnerable to stored XSS in user login history real_rip—
  4. CVE-2026-40874mailcow: dockerized missing authorization on Forwarding Hosts delete action—
  5. CVE-2026-40873mailcow: dockerized vulnerable to stored XSS in Quarantine attachment filenames—
  6. CVE-2026-40872mailcow: dockerized vulnerable to stored XSS in autodiscover logs email address field—
  7. CVE-2026-40871mailcow: dockerized vulnerable to Second Order SQL Injection in quarantine category via API7.2
  8. CVE-2025-53909mailcow: dockerized vulnerable to SSTI in Quota and Quarantine Notification Template9.1
  9. CVE-2025-25198mailcow: dockerized vulnerable to password reset poisoning7.1
  10. CVE-2024-41960Cross-site Scripting (XSS) via Relay Hosts Configuration in mailcow: dockerized3.8
  11. CVE-2024-41959Cross-site Scripting (XSS) via API Logs in mailcow: dockerized7.6
  12. CVE-2024-41958Two-Factor Authentication (2FA) Bypass in mailcow: dockerized6.6
  13. CVE-2024-31204mailcow Cross-site Scripting Vulnerability via Exception Handler6.1
  14. CVE-2024-30270mailcow Path Traversal and Arbitrary Code Execution Vulnerability6.2
  15. CVE-2024-24760Mailcow Docker Container Exposure to Local Network8.8

The record

Peak rank
#182 in Apr 2026
Busiest month shown
Apr 2026, 6 CVEs
Months with a KEV entry
0 since Apr 2026
Monthly snapshots
1 since 2026
Mailcow's full record, month by month