early signals ZDI published

ZDI-26-810: MailEnable Auth Cleartext Storage Information Disclosure Vulnerability

// AI summary

MailEnable has CVE-2026-114551, an information disclosure flaw allowing remote attackers to obtain sensitive data without needing authentication on affected installations.

// from the source

This vulnerability allows remote attackers to disclose sensitive information on affected installations of MailEnable. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.9. The following CVEs are assigned: CVE-2026-114551.
Read at zerodayinitiative.com ↗ More from ZDI published

# more from ZDI published

  1. ZDI published infra

    ZDI-26-839: MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerability

    zerodayinitiative.com
  2. ZDI published infra

    ZDI-26-840: MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability

    zerodayinitiative.com
  3. ZDI published infra

    ZDI-26-841: MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability

    zerodayinitiative.com
  4. ZDI published infra

    ZDI-26-842: MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability

    zerodayinitiative.com
  5. ZDI published infra

    ZDI-26-843: MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability

    zerodayinitiative.com