Unsafe DLL Loading Vulnerability in MailEnable Software
CVE-2025-34422

8.5HIGH

Key Information:

Vendor

Mailenable

Status
Mailenable
Vendor
CVE Published:
10 December 2025

What is CVE-2025-34422?

MailEnable software contains a vulnerability in versions prior to 10.54 that allows local arbitrary code execution through unsafe DLL loading. The MailEnable administrative executable is designed to load the MEAIPC.DLL from its installation directory without proper integrity validation or a secure search order. An attacker with write access to this directory could insert a malicious MEAIPC.DLL, leading to the execution of unauthorized code with the same privileges as the MailEnable process. Addressing this vulnerability is essential for maintaining the security and integrity of systems running MailEnable.

Affected Version(s)

MailEnable 0 < 10.54

References

https://mailenable.com/Standard-ReleaseNotes.txt
release-notespatch
https://www.mailenable.com/
product
https://www.vulncheck.com/advisories/mailenable-dll-hijac...
third-party-advisory

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

MushroomSecTeam (Spotify, AmirSUN, M30Brad, Hannah Green, av01t3x, PG)
JSON
.
CVE-2025-34422 : Unsafe DLL Loading Vulnerability in MailEnable Software