modoboa vulnerabilities

CVEs per yearBy the year they were published

1. 202314
2. 20264

Newest CVEs

• CVE-2026-113599

  Modoboa before 2.8.0 IDOR via API v2 armessages Auto-Reply Creation

  modoboa · modoboa

  Medium5.3
• CVE-2026-113598

  Modoboa before 2.8.0 IDOR via API v2 alarms bulk_delete

  modoboa · modoboa

  Medium5.3
• CVE-2026-56780

  Modoboa < 2.9.0 - Insecure Direct Object Reference in Account Password Change API

  modoboa · modoboa

  High7.7
• CVE-2026-27602

  Modoboa has an OS Command Injection

  modoboa · modoboa

  High7.2
• CVE-2023-5690

  Cross-Site Request Forgery (CSRF) in modoboa/modoboa

  modoboa · modoboa/modoboa

  Medium5.3
• CVE-2023-5689

  Cross-site Scripting (XSS) - DOM in modoboa/modoboa

  modoboa · modoboa/modoboa

  High7.1
• CVE-2023-5688

  Cross-site Scripting (XSS) - DOM in modoboa/modoboa

  modoboa · modoboa/modoboa

  Critical9.8
• CVE-2023-2228

  Cross-Site Request Forgery (CSRF) in modoboa/modoboa

  modoboa · modoboa/modoboa

  Medium6.8
• CVE-2023-2227

  Improper Authorization in modoboa/modoboa

  modoboa · modoboa/modoboa

  Critical9.1
• CVE-2023-2160

  Weak Password Requirements in modoboa/modoboa

  modoboa · modoboa/modoboa

  Medium6.3