https://seclists.org/oss-sec/2026/q2/425: XSS in Postorius (Mailman 3) 1.3.13 and earlier
Published May 7, 2026
·Updated
Affected Software
1 affected component
Mailman Postorius<=1.3.13
Frequently Asked Questions
1
What is the severity of CVE-2026-0999?
CVE-2026-0999 is classified as a high severity XSS vulnerability affecting Postorius versions 1.3.13 and earlier.
2
How do I fix CVE-2026-0999?
To fix CVE-2026-0999, update to the latest version of Postorius that includes the fix for this XSS vulnerability.
3
What versions are affected by CVE-2026-0999?
CVE-2026-0999 affects Postorius versions 1.3.13 and earlier.
4
Is there any known exploit for CVE-2026-0999?
Yes, there are potential exploits for CVE-2026-0999 that can leverage the XSS vulnerability in the admin UI.
5
What kind of vulnerability is CVE-2026-0999?
CVE-2026-0999 is an XSS (Cross-Site Scripting) vulnerability that allows an attacker to inject malicious scripts.