Security Vulnerability in MailWatch for MailScanner Affects Authenticated Users

CVE-2026-85749

What is CVE-2026-85749?

MailWatch for MailScanner prior to version 1.2.27 contains a vulnerability that allows any authenticated user—including roles such as U/user, D/domain-admin, and H/host—to manipulate quarantined emails belonging to other users or domains. By exploiting this issue, a low-privilege user can execute actions like releasing or permanently deleting emails from quarantine by supplying the message ID. The application's failure to enforce ownership checks during the quarantine management process raises significant security concerns. This vulnerability has been addressed in version 1.2.27, which includes the necessary fixes to prevent unauthorized access and ensure that action paths respect user roles.

References