MailEnable

Search everything

Mentions · 7d0
Mentions · 30d3
All mentions3
First seenOct 27, 2026
Last mentioned7d ago

Timeline

3 articles · newest first

MailEnable arbitrary file creation vulnerability

ZDI-26-869 CVSS 7.4 lets remote attackers create arbitrary files on MailEnable without authentication.

ZDI Published AdvisoriesNov 4, 06:00 UTC · 7d agoVulnerabilityCVE-2026-114556

MailEnable cleartext auth storage leaks data without login

ZDI rates CVE-2026-114551 at CVSS 5.9 and says authentication is not required.

ZDI Published AdvisoriesOct 27, 05:00 UTC · 15d agoVulnerability 2 sourcesCVE-2026-1145511

MailEnable XXE flaw lets authenticated attackers read sensitive data

ZDI rates CVE-2026-114552 at CVSS 6.5; login is required and no fix or affected versions are named.

ZDI Published AdvisoriesOct 27, 05:00 UTC · 15d agoVulnerability 2 sourcesCVE-2026-1145521

Related CVEs

by mentions

CVE-2026-1145526.5
XXE Information Disclosure in MailEnable
published 7d agoMailEnable
CVE-2026-1145515.9
Cleartext Credential Storage in MailEnable Authentication
published 7d agoMailEnable
CVE-2026-114556—
published —

Appears with

Zero Day Initiativeorganization · 2

Entities are extracted by the model from each article. First seen Oct 27, 2026, last mentioned 7d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.