[NEW] [medium] MailPit: Vulnerability allows disclosure of information
A remote, anonymous attacker can exploit a vulnerability in MailPit to disclose information.
CSIRTS triage
- What
- A vulnerability allows a remote, anonymous attacker to disclose information.
- Who is affected
- Remote, anonymous users of MailPit are affected.
- Urgency
- Remediation is medium urgency due to the potential for information disclosure.
- Action
- Apply security updates as they become available.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch MailPit
Get an email when a new MailPit advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2556
Recent advisories for MailPit
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- medium[UPDATE] [medium] MailPit: Vulnerability allows Denial of Servicecert-bund · 2026-07-21
- medium[UPDATE] [medium] MailPit: Multiple vulnerabilitiescert-bund · 2026-07-21
- mediumCVE-2026-48824: Mailpit is an email testing tool and API for developers. Prior to version 1.30.1, the fix for …nvd · 2026-07-20
- highCVE-2026-45713: Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the Mailpit …nvd · 2026-07-20
- mediumCVE-2026-45712: Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the screensh…nvd · 2026-07-20
- mediumCVE-2026-45711: Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the mailpit …nvd · 2026-07-20
More from CERT-Bund (BSI) Security Advisories
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow denial of service2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow Denial of Service2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow denial of service2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow unspecified attack2026-07-31