stalwartlabs vulnerabilities

6 published CVEs name stalwartlabs among the affected products.

Critical 1High 3Medium 2Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-81036
Stalwart Mail Server through 0.16.19 Authorization Code Disclosure via Unvalidated OAuth redirect_uri
stalwartlabs · stalwart
High8.5
CVE-2026-26312
Stalwart Mail Server has Out-of-Memory Denial of Service via Malformed Nested MIME Messages
stalwartlabs · stalwart
Medium6.5
CVE-2025-61600
Unbounded Memory Allocation in Stalwart IMAP parser
stalwartlabs · stalwart
High7.5
CVE-2025-59045
Stalwart vulnerable to Memory Exhaustion via CalDAV Event Expansion
stalwartlabs · stalwart
High7.1
CVE-2024-35187
Stalwart Mail Server has privilege escalation by design
stalwartlabs · mail-server
Critical9.1
CVE-2024-35179
Unprivileged Stalwart Mail Server user can read files as root
stalwartlabs · mail-server
Medium6.8