Modoboa vulnerabilities

Products

• Modoboa 17
• Modoboa/modoboa 13

Newest

• modoboa Modoboa before 2.8.0 IDOR via API v2 armessages Auto-Reply Creation CVE-2026-113599 5.3 MediumOctober 20, 2026
• modoboa Modoboa before 2.8.0 IDOR via API v2 alarms bulk_delete CVE-2026-113598 5.3 MediumOctober 20, 2026
• modoboa Modoboa < 2.9.0 - Insecure Direct Object Reference in Account Password Change API CVE-2026-56780 7.7 HighJune 29, 2026
• modoboa Modoboa has an OS Command Injection CVE-2026-27602 Fix available 7.2 HighMarch 25, 2026
• modoboa, modoboa modoboa/modoboa +1 more Cross-Site Request Forgery (CSRF) in modoboa/modoboa CVE-2023-5690 Fix available 5.3 MediumOctober 20, 2023
• modoboa, modoboa modoboa/modoboa +1 more Cross-site Scripting (XSS) - DOM in modoboa/modoboa CVE-2023-5689 Fix available 7.1 HighOctober 20, 2023
• modoboa, modoboa modoboa/modoboa +1 more Cross-site Scripting (XSS) - DOM in modoboa/modoboa CVE-2023-5688 Fix available 9.8 CriticalOctober 20, 2023
• modoboa, modoboa modoboa/modoboa +1 more Cross-Site Request Forgery (CSRF) in modoboa/modoboa CVE-2023-2228 Fix available 6.8 MediumApril 21, 2023
• modoboa, modoboa modoboa/modoboa +1 more Improper Authorization in modoboa/modoboa CVE-2023-2227 Fix available EPSS 44.0% 9.1 CriticalApril 21, 2023
• modoboa, modoboa modoboa/modoboa +1 more Weak Password Requirements in modoboa/modoboa CVE-2023-2160 Fix available 6.3 MediumApril 18, 2023
• modoboa, modoboa modoboa/modoboa +1 more Cross-site Scripting (XSS) - Reflected in modoboa/modoboa CVE-2023-0949 Fix available 4.8 MediumFebruary 22, 2023
• modoboa installer, modoboa/modoboa-installer +1 more Improper Restriction of Excessive Authentication Attempts in modoboa/modoboa-installer CVE-2023-0860 Public exploitFix available 7.8 HighFebruary 16, 2023
• modoboa, modoboa modoboa/modoboa +1 more Authentication Bypass by Primary Weakness in modoboa/modoboa CVE-2023-0777 Public exploitFix available EPSS 15.2% 8.6 HighFebruary 10, 2023
• modoboa, modoboa modoboa/modoboa +1 more Cross-site Scripting (XSS) - Stored in modoboa/modoboa CVE-2023-0519 Fix available 7.1 HighJanuary 26, 2023
• modoboa, modoboa modoboa/modoboa +1 more Cross-site Scripting (XSS) - Stored in modoboa/modoboa CVE-2023-0470 Fix available 7.1 HighJanuary 26, 2023
• modoboa, modoboa modoboa/modoboa +1 more Cross-Site Request Forgery (CSRF) in modoboa/modoboa CVE-2023-0438 Fix available 5.4 MediumJanuary 23, 2023
• modoboa, modoboa modoboa/modoboa +1 more Cross-Site Request Forgery (CSRF) in modoboa/modoboa CVE-2023-0406 Fix available 5.4 MediumJanuary 19, 2023
• modoboa, modoboa modoboa/modoboa +1 more Cross-Site Request Forgery (CSRF) in modoboa/modoboa CVE-2023-0398 Fix available 5.4 MediumJanuary 19, 2023
• modoboa modoboa-dmarc Modoboa is vulnerable to an XML External Entity Injection (XXE) CVE-2019-19702 Fix available 7.5 HighDecember 10, 2019