CVE-2026-34834

Bulwark Webmail (self-hosted webmail client for Stalwart Mail Server) had an authentication bypass in verifyIdentity() before version 1.4.10 due to missing session cookie validation. The logic returned true when no session cookies were present, allowing unauthenticated attackers to bypass securit...

PT-2020-5770

Name of the Vulnerable Software and Affected Versions: Sympa versions prior to 6.2.59b.2 Description: The issue is related to the authenticateAndRun function in the Sympa mailing list manager, which lacks proper cookie value validation. This allows a remote attacker to gain access to confidential...