Known Vulnerabilities for Mail Server by Courier-mta
Listed below are 1 of the newest known vulnerabilities associated with "Mail Server" by "Courier-mta".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-104446 json | YesWiki before 4.6.7 contains an authentication bypass in the contact mail AJAX handler that allows unauthenticated attackers... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-94184 json | A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail serve... | Not Provided | 2026-09-21 | 2026-10-01 |
| CVE-2026-92595 json | Nodemailer (npm package `nodemailer`) versions 9.1.0 and earlier do not honor the `disableFileAccess` and `disableUrlAccess` ... | Not Provided | 2026-09-16 | 2026-09-19 |
| CVE-2026-86751 json | Snipe-IT before 8.7.0 fails to properly sanitize markdown image syntax in note fields, allowing authenticated users to read a... | Not Provided | 2026-09-09 | 2026-09-09 |
| CVE-2026-86741 json | Snipe-IT versions before 8.7.0 fail to sanitize the category EULA text field before rendering it in checkout confirmation ema... | Not Provided | 2026-09-09 | 2026-09-09 |
| CVE-2026-86003 json | CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-85751 json | Mailu is a mail server distributed as a set of Docker images. From Mailu 2.0 until 2024.06.55 and prior to Mailu helm-charts ... | Not Provided | 2026-09-21 | 2026-09-21 |
| CVE-2026-81036 json | Stalwart Mail Server does not compare an OAuth redirect target against any registered destination in its default configuratio... | Not Provided | 2026-08-26 | 2026-08-29 |
| CVE-2026-81034 json | Netmaker disables certificate verification on the connection to the configured mail server. The sender in pro/email/smtp.go a... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2026-77637 json | Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, tool.GET("wopi") and tool.POST("mail") in rou... | Not Provided | 2026-09-22 | 2026-09-22 |