Mailu

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Mailu records in CISA KEV

No Mailu vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records

TI-2026-75367 CVE-2026-86009

HIGH 69

Mailu is a mail server distributed as a set of Docker images.

CVSS 4.0HIGH 8.2 Network High privileges No interaction EPSS 0.00378 Published 2026-10-16 No fix listed CWE-285

TI-2026-58835 CVE-2026-85751

MEDIUM 50

Mailu is a mail server distributed as a set of Docker images.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00557 Published 2026-09-21 Fixed in 2024.06.55, 2.7.3 CWE-290

TI-2020-04295 CVE-2020-5239

MEDIUM 40

In Mailu before version 1.7, an authenticated user can exploit a vulnerability in Mailu fetchmail script and gain full access to a Mailu instance.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0089 Published 2020-02-13 Fixed in 1.7 CWE-863

TI-2026-36418 CVE-2026-49217

LOW 39

Mailu is a mail server as a set of Docker images.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00358 Published 2026-08-20 Fixed in 2024.06.52 CWE-306

TI-2026-75366 CVE-2026-86008

LOW 33

Mailu is a mail server distributed as a set of Docker images.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00314 Published 2026-10-16 Fixed in 8577c929b4ade04d3cd4210cf036601abd793556 CWE-269