Vulnerability in Mailcow Mailcow-dockerized
CVE-2026-40874
mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, no administrator verification takes place when deleting Forwarding Hosts with `/api/v1/delete/fwdhost`. Any authenticated user can…
EPSS: 0.002 (6.7th percentile) — read the EPSS interpretation.
Affected products
- Mailcow Mailcow-dockerized — versions < 2026-03b
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)