Products: 1
Vulnerabilities: 5
Known Exploited: 0
0
Critical Level Threats
4
High Level Threats
1
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-35391
Bulwark Webmail getClientIP() trusted client-controlled X-Forwarded-For value, enabling rate limit bypass and audit log forgery
Last Modified: Apr 10, 2026
Published: Apr 06, 2026
CVE-2026-35390
Content-Security-Policy was set to Report-Only mode, failing to block XSS attacks
Last Modified: Apr 10, 2026
Published: Apr 06, 2026
CVE-2026-35389
Bulwark Webmail S/MIME signature verification accepted self-signed certificates
Last Modified: Apr 10, 2026
Published: Apr 06, 2026
CVE-2026-34834
Bulwark Webmail: Authentication Bypass in verifyIdentity() due to missing cookie validation
Last Modified: Apr 10, 2026
Published: Apr 02, 2026
CVE-2026-34833
Bulwark Webmail: Information Exposure: password returned in /api/auth/session
Last Modified: Apr 10, 2026
Published: Apr 02, 2026
Items Per Page
