Information Disclosure Vulnerability in MailEnable by MailEnable
CVE-2026-114551

5.9MEDIUM

Key Information:

Vendor

Mailenable

Status
Mailenable
Vendor
CVE Published:
3 November 2026

What is CVE-2026-114551?

The MailEnable Auth Cleartext Storage vulnerability allows unauthorized remote attackers to access sensitive information stored in plaintext. This flaw arises from improper handling of mailbox credentials, leading to the potential disclosure of stored credentials without requiring authentication. Attackers can exploit this vulnerability to leverage further exploits, significantly increasing the risk of compromise for affected installations.

Affected Version(s)

MailEnable 10.59

References

https://www.zerodayinitiative.com/advisories/ZDI-26-810/
x_research-advisory

CVSS V3.0

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.