Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-40871

1 brief RSS
high advisory

mailcow: dockerized Second-Order SQL Injection Vulnerability (CVE-2026-40871)

A second-order SQL injection vulnerability (CVE-2026-40871) exists in mailcow: dockerized versions prior to 2026-03b due to improper validation of the quarantine_category field in the /api/v1/add/mailbox endpoint, leading to potential exfiltration of sensitive data.

mailcow: dockerized sql-injection mailcow cve-2026-40871 webserver
2r 1t 1c