Skip to content
Multiple Cross-Site Scripting (XSS) Vulnerabilities in Mailcow
aikido.dev | research | #ai-security | #account-takeover | #xss | #cve | #ai-pentesting | #mailcow | #email-server
Summary
AI pentest agents found three XSS flaws in Mailcow, including one letting unauthenticated attackers hijack admin sessions—assigned CVE-2026-40872, CVE-2026-40873, and CVE-2026-40875.
- Published
- Collected