IceWarp vulnerabilities

3 known vulnerabilities in IceWarp from IceWarp. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  IceWarp: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-2493Mar 16, 2026IceWarpEPSS 5.49%

  IceWarp collaboration Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of IceWarp. Authentication is not required to exploit this vulnerability. The

• 9.8 Critical severity

  IceWarp: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-14500Dec 23, 2025IceWarpEPSS 1.56%

  IceWarp14 X-File-Operation Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IceWarp. Authentication is not required to exploit this vulnerability. The speci

• 8.8 High severity

  IceWarp: Improper Neutralization of Input During Web Page Generation

  CVE-2025-14499Dec 23, 2025IceWarp

  IceWarp gmaps Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of IceWarp. User interaction is required to exploit this vulnerability in that the target must