Sstalwartlabs

Products

Exploited and recent CVEs

• CVE-2026-81036 High 8.1 Stalwart Mail Server through 0.16.19 Authorization Code Disclosure via Unvalidated OAuth redirect_uri 0.4%
• CVE-2026-26312 Medium 6.5 Stalwart Mail Server has Out-of-Memory Denial of Service via Malformed Nested MIME Messages 0.4%
• CVE-2025-61600 High 7.5 Unbounded Memory Allocation in Stalwart IMAP parser 0.6%
• CVE-2025-59045 High 7.1 Stalwart vulnerable to Memory Exhaustion via CalDAV Event Expansion 0.3%
• CVE-2024-35187 Critical 9.1 Stalwart Mail Server has privilege escalation by design 0.7%
• CVE-2024-35179 Medium 6.8 Unprivileged Stalwart Mail Server user can read files as root 0.6%