Vulnerabilities
Summary — last 7 days
New vulnerabilities4,708▼ 435 vs. last week
Critical / high1,917▼ 1,031 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)789▲ 681 vs. last week
More filters
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Received | High (7.5) | 0.51% | — | Bulwark WebmailAI | 10/20/2026 | 10/20/2026 | Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.9.2, the unauthenticated POST /api/fetch-ical endpoint validates a caller-supplied hostname with one DNS lookup and then passes the URL to fetch, which performs a separate lookup for the socket connection. An attacker controlling… |