CVE-2026-113728 | Bulwark Mail Bulwark Webmail up to 1.9.1 DNS Lookup /api/fetch-ical confused deputy

October 21, 2026 Yanac

A vulnerability classified as problematic has been found in Bulwark Mail Bulwark Webmail up to 1.9.1. This impacts an unknown function of the file /api/fetch-ical of the component DNS Lookup. This manipulation causes unintended intermediary.

This vulnerability is registered as CVE-2026-113728. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More