CVE-2026-35389

概要

参考情報

• bulwarkmail/webmail security advisory · Vendor Advisory

webmail のその他の脆弱性

• CVE-2026-35391高 7.5Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.4.11, the getClientIP() function in lib/admin/session.t…
• CVE-2026-35390中 5.4Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.4.11, the reverse proxy (proxy.ts) set the Content-Secu…
• CVE-2026-34834高 7.5Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to version 1.4.10, the verifyIdentity() function contained l…
• CVE-2026-34833高 7.5Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to version 1.4.10, the GET /api/auth/session endpoint previo…