ZDI-26-811: Security vulnerability

Published Oct 27, 2026

Updated

This vulnerability allows remote attackers to disclose sensitive information on affected installations of MailEnable. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2026-114552.

Frequently Asked Questions

Who can exploit this issue?

A remote attacker who can authenticate to an affected MailEnable installation can exploit the vulnerability. Unauthenticated remote attackers are not described as able to exploit it.

What is the potential impact?

Successful exploitation can disclose sensitive information from an affected installation.

How severe is this vulnerability?

ZDI assigned this issue a CVSS rating of 6.5.

ZDI-26-811: Security vulnerability

Frequently Asked Questions

Who can exploit this issue?

What is the potential impact?

How severe is this vulnerability?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the potential impact?

How severe is this vulnerability?