Beveiligingsadvies

CVE-2026-7460

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-20 02:19:07

Laatst bijgewerkt 2026-05-20 12:48:15

Toegewezen door Fluid Attacks

CVSS-score 7.4

Status PUBLISHED

Beschrijving

mailcow-dockerized contains a stored cross-site scripting vulnerability in the administrator Queue Manager. The Queue Manager fetches mail queue entries from /api/v1/get/mailq/all, copies server-controlled Postfix queue fields into DataTables rows, and renders several of those fields as HTML without adequate output encoding. This issue affects mailcow-dockerized: 2026-03b.

← Alle CVE's bekijken Bekijk op cve.org ↗