Postalserver vulnerabilities
We track 1 vulnerability in Postalserver products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 12, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Postalserver vulnerabilities
- 8.1 High severity
postal: Improper Neutralization of Input During Web Page Generation
Postal is an open source SMTP server. Postal versions less than 3.3.5 had a HTML injection vulnerability that allowed unescaped data to be included in the admin interface. The primary way for unescaped data to be added is via the API's "send/raw" method. This