https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T18:43:19.689611+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-125757 CVE-2026-125757 — mailcow: dockerized before 2026-11 Template Injection RCE via Domain-Wide Footer 2026-11-11T18:43:19.691561+00:00

Affected: mailcow: dockerized

mailcow: dockerized before 2026-11 contains a server-side template injection vulnerability that allows domain administrators to execute commands in the shared rspamd container by storing a malicious domain-wide footer. Attackers can embed a Jinja macro with an os.execute default value, rendered by the rspamd MOO_FOOTER prefilter, to read or inject mail for every tenant and disable filtering.