mailcow
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 27 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 14, 2017 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →mailcow: dockerized before 2026-11 Template Injection RCE via Domain-Wide Footer
mailcow: dockerized before 2026-11 Template Injection RCE via Domain-Wide Footer
mailcow-dockerized 2026-03b - Stored XSS in Queue Manager via unescaped
mailcow-dockerized Login Page has Reflected Parameter Injection / Wrong-Context XSS Escaping
mailcow: dockerized vulnerable to stored XSS in user login history real_rip
mailcow: dockerized missing authorization on Forwarding Hosts delete action
mailcow: dockerized vulnerable to stored XSS in Quarantine attachment filenames
mailcow: dockerized vulnerable to stored XSS in autodiscover logs email address field
mailcow: dockerized vulnerable to Second Order SQL Injection in quarantine category via API
Found and reported a Second-Order SQL Injection in mailcow (CVE-2026-40871) – High severity
Monitor mailcow in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.