mailcow\ vulnerabilities and fixes

Recent CVEs affecting mailcow\, with upgrade or downgrade steps. 5 tracked.

mailcow\ has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-07-17. Highest priority: CVE-2025-25198 (score 51/100).

• CVE-2025-53909 CRITICAL 9.1 UPGRADE mailcow: dockerized is an open source groupware/email suite based on docker
• CVE-2025-25198 HIGH 7.1 UPGRADE mailcow: dockerized is an open source groupware/email suite based on docker
• CVE-2024-41960 LOW 3.8 UPGRADE mailcow: dockerized is an open source groupware/email suite based on docker
• CVE-2024-41959 HIGH 7.6 UPGRADE mailcow: dockerized is an open source groupware/email suite based on docker
• CVE-2024-41958 MEDIUM 6.6 UPGRADE mailcow: dockerized is an open source groupware/email suite based on docker

FAQ

How do I fix mailcow\ vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is mailcow\ being exploited right now?

None of the tracked mailcow\ CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which mailcow\ CVE should I patch first?

CVE-2025-25198 currently ranks highest (51/100): mailcow: dockerized is an open source groupware/email suite based on docker.

RSS feed for mailcow\ · ← Back to latest CVEs