Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitymedium

MailEnable arbitrary file creation vulnerability

Original title: ZDI-26-869: MailEnable Save Directory Traversal Arbitrary File Creation Vulnerability

ZDI Published Advisories ()
Read at zerodayinitiative.com
AI summary · x-ai/grok-4.7Summaries by Vani AI

ZDI-26-869 CVSS 7.4 lets remote attackers create arbitrary files on MailEnable without authentication.

The vulnerability affects MailEnable installations allowing remote arbitrary file creation. Authentication is not required for exploitation. CVEs assigned include CVE-2026-114556.

Key facts
  • CVSS rating of 7.4
  • No authentication required
  • Arbitrary file creation possible
Security assessment · AI, from the articleNo known exploitation

Impact: Arbitrary file creation on MailEnable server

Analyze CVE-2026-114556 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-114556
Tags
mailemaildirectory-traversalarbitrary-file-write
Vendors
MailEnable

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-114556
———

From the original article

This vulnerability allows remote attackers to create arbitrary files on affected installations of MailEnable. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.

ZDI Published Advisories

zerodayinitiative.com

Read the full article at ZDI Published Advisories

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.