[ Vendor · 1 CVEs ]
bulwarkmail
CVEs affecting bulwarkmail published in the last 30 days, plus any bulwarkmail CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-113728 | 20 Oct 2026 | CVSS 7.5 | bulwarkmail webmailBulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.9.2, the unauthenticated POST /api/fetch-ical endpoint validates… |