Vulnerabilities

TI-2026-78531 CVE-2026-113728

Server-side request forgery in Bulwark Webmail via DNS rebinding

LOW 39

Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00507 Published 2026-10-20 Fixed in 1.9.2 CWE-918

TI-2026-27527 CVE-2026-35391

LOW 37

Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00138 Published 2026-04-06 Fixed in 1.4.11 CWE-348

TI-2026-27526 CVE-2026-35390

LOW 23

Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00173 Published 2026-04-06 Fixed in 1.4.11 CWE-79

TI-2026-27525 CVE-2026-35389

LOW 37

Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00181 Published 2026-04-06 Fixed in 1.4.11 CWE-295

TI-2026-27078 CVE-2026-34834

MEDIUM 43

Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00256 Published 2026-04-02 Fixed in 1.4.10 CWE-287

TI-2026-27077 CVE-2026-34833

MEDIUM 43

Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00173 Published 2026-04-02 Fixed in 1.4.10 CWE-312