CVE-2026-86009

Mailu is a mail server distributed as a set of Docker images. Prior to f05aeb8322e2f61096af6b089d61ba6f40587d96, domain managers can enable spoofing for hosted domains they do not control. A potentially malicious domain administrator enables spoofing for another hosted domain and can send emails...

CVE-2026-86008

Mailu is a mail server distributed as a set of Docker images. Prior to 8577c929b4ade04d3cd4210cf036601abd793556, a domain manager targeting an administrative account or another domain manager with greater privileges can reset passwords or obtain tokens for that account. This authorization failure...

CVE-2026-86009 Mailu: Domain managers can allow themselves to spoof on other hosted domains they should not control

Mailu is a mail server distributed as a set of Docker images. Prior to f05aeb8322e2f61096af6b089d61ba6f40587d96, domain managers can enable spoofing for hosted domains they do not control. A potentially malicious domain administrator enables spoofing for another hosted domain and can send emails...

CVE-2026-86009 Mailu: Domain managers can allow themselves to spoof on other hosted domains they should not control

Mailu is a mail server distributed as a set of Docker images. Prior to f05aeb8322e2f61096af6b089d61ba6f40587d96, domain managers can enable spoofing for hosted domains they do not control. A potentially malicious domain administrator enables spoofing for another hosted domain and can send emails...

EUVD-2026-102922

Mailu is a mail server distributed as a set of Docker images. Prior to f05aeb8322e2f61096af6b089d61ba6f40587d96, domain managers can enable spoofing for hosted domains they do not control. A potentially malicious domain administrator enables spoofing for another hosted domain and can send emails...

CVE-2026-86009

Mailu is a mail server distributed as a set of Docker images. Prior to f05aeb8322e2f61096af6b089d61ba6f40587d96, domain managers can enable spoofing for hosted domains they do not control. A potentially malicious domain administrator enables spoofing for another hosted domain and can send emails...

CVE-2026-86009

The Mailu mail server, distributed as a set of Docker images, contains a vulnerability where domain managers can enable spoofing for hosted domains they do not control. Due to this improper authorization (CWE-285, CWE-863), a malicious administrator can authorize spoofing for another hosted domai...

CVE-2026-86009 Mailu: Domain managers can allow themselves to spoof on other hosted domains they should not control

Mailu is a mail server distributed as a set of Docker images. Prior to f05aeb8322e2f61096af6b089d61ba6f40587d96, domain managers can enable spoofing for hosted domains they do not control. A potentially malicious domain administrator enables spoofing for another hosted domain and can send emails...

CVE-2026-86008 Mailu domain managers can take over higher-privileged accounts

Mailu is a mail server distributed as a set of Docker images. Prior to 8577c929b4ade04d3cd4210cf036601abd793556, a domain manager targeting an administrative account or another domain manager with greater privileges can reset passwords or obtain tokens for that account. This authorization failure...

CVE-2026-86008

Mailu is a mail server distributed as a set of Docker images. Prior to 8577c929b4ade04d3cd4210cf036601abd793556, a domain manager targeting an administrative account or another domain manager with greater privileges can reset passwords or obtain tokens for that account. This authorization failure...

CVE-2026-86008 Mailu domain managers can take over higher-privileged accounts

Mailu is a mail server distributed as a set of Docker images. Prior to 8577c929b4ade04d3cd4210cf036601abd793556, a domain manager targeting an administrative account or another domain manager with greater privileges can reset passwords or obtain tokens for that account. This authorization failure...

CVE-2026-86008

The Mailu mail server, distributed as Docker images, contains an authorization failure (CWE-285, CWE-269) in versions prior to commit 8577c929b4ade04d3cd4210cf036601abd793556 . A domain manager can exploit this flaw to target an administrative account or another domain manager with higher privile...

CVE-2026-86008 Mailu domain managers can take over higher-privileged accounts

Mailu is a mail server distributed as a set of Docker images. Prior to 8577c929b4ade04d3cd4210cf036601abd793556, a domain manager targeting an administrative account or another domain manager with greater privileges can reset passwords or obtain tokens for that account. This authorization failure...

EUVD-2026-102921

Mailu is a mail server distributed as a set of Docker images. Prior to 8577c929b4ade04d3cd4210cf036601abd793556, a domain manager targeting an administrative account or another domain manager with greater privileges can reset passwords or obtain tokens for that account. This authorization failure...

PT-2026-115658

Mailu is a mail server distributed as a set of Docker images. Prior to 8577c929b4ade04d3cd4210cf036601abd793556, a domain manager targeting an administrative account or another domain manager with greater privileges can reset passwords or obtain tokens for that account. This authorization failure...

CVE-2026-86009: Improper Authorization

Mailu is a mail server distributed as a set of Docker images. Prior to f05aeb8322e2f61096af6b089d61ba6f40587d96, domain managers can enable spoofing for hosted domains they do not control. A potentially malicious domain administrator enables spoofing for another hosted domain and can send emails...

PT-2026-115659

Name of the Vulnerable Software and Affected Versions Mailu versions prior to f05aeb8322e2f61096af6b089d61ba6f40587d96 Description Domain managers can enable spoofing for hosted domains they do not control. This allows a malicious domain administrator to send emails authenticated with DKIM...

CVE-2026-86008: Improper Authorization

Mailu is a mail server distributed as a set of Docker images. Prior to 8577c929b4ade04d3cd4210cf036601abd793556, a domain manager targeting an administrative account or another domain manager with greater privileges can reset passwords or obtain tokens for that account. This authorization failure...

Mailu authorization issue vulnerability

Mailu has an authorization issue vulnerability. This vulnerability arises from the ability of domain administrators to enable deception for uncontrolled managed domains, allowing them to send domain emails that are authenticated via DKIM/SPF, even though these emails should not be sent...

Mailu Permission Authorization and Access Control Vulnerabilities

Mailu has a security vulnerability. This vulnerability stems from improper authorization. Domain administrators can reset passwords or obtain tokens for administrator accounts or domain administrators with higher privileges. This could lead to the takeover of highly privileged accounts and the...