Jorian on Mythryl: “New blog post is out! A few vulnerabilities in Mailcow. A critical…”

New blog post is out! A few vulnerabilities in Mailcow. A critical unauthenticated XSS, and another interesting Self-XSS escalation involving a Login CSRF with a leftover tab. Check it out: www.aikido.dev/blog/xss-vul...

aikido.devMultiple XSS Vulnerabilities Found in Mailcow, Including Unauthenticated Account TakeoverAikido's AI pentest agent found three XSS vulnerabilities in Mailcow, one of which let unauthenticated attackers take over administrator accounts. All issues have been patched as of version 2026-03b.

17/4/26, 8:34 pm1 repost1 like

Post