IceWarp

Products

ProductCVEsExploitedLatest
IceWarp3–Mar 13, 2026
Icewarp Mail Server3–May 16, 2025

Exploited and recent CVEs

  • CVE-2026-2493 High 7.5 IceWarp collaboration Directory Traversal Information Disclosure Vulnerability 5.0%
  • CVE-2025-14500 Critical 9.8 IceWarp14 X-File-Operation Command Injection Remote Code Execution Vulnerability 1.6%
  • CVE-2025-14499 High 8.8 IceWarp gmaps Cross-Site Scripting Authentication Bypass Vulnerability 0.9%
  • CVE-2025-40632 Low 2.0 Cross-site scripting (XSS) vulnerability in IceWarp Mail Server 0.2%
  • CVE-2025-40631 Low 2.0 HTTP host header injection vulnerability in IceWarp Mail Server 0.2%
  • CVE-2025-40630 Medium 5.1 Open redirection vulnerability in IceWarp Mail Server 0.5%