early signals ZDI published

ZDI-26-811: MailEnable parseObjectResponse XML External Entity Processing Information Disclosure Vulnerability

// AI summary

MailEnable has CVE-2026-114552, an XML External Entity Processing vulnerability allowing remote attackers to disclose sensitive information on affected installations requiring authentication.

// from the source

This vulnerability allows remote attackers to disclose sensitive information on affected installations of MailEnable. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2026-114552.
Read at zerodayinitiative.com ↗ More from ZDI published

# more from ZDI published

  1. ZDI published infra

    ZDI-26-839: MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerability

    zerodayinitiative.com
  2. ZDI published infra

    ZDI-26-840: MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability

    zerodayinitiative.com
  3. ZDI published infra

    ZDI-26-841: MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability

    zerodayinitiative.com
  4. ZDI published infra

    ZDI-26-842: MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability

    zerodayinitiative.com
  5. ZDI published infra

    ZDI-26-843: MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability

    zerodayinitiative.com