Security Advisory

CVE-2026-35389

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-06 20:11:56

Last updated 2026-04-07 16:19:51

Assigner GitHub_M

CVSS score 8.7

State PUBLISHED

Description

Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.4.11, S/MIME signature verification did not validate the certificate trust chain (checkChain: false). Any email signed with a self-signed or untrusted certificate was displayed as having a valid signature. This vulnerability is fixed in 1.4.11.

← Browse all CVEs View on cve.org ↗