by Kastro
Paper/Archive/CVE-2026-44400

CVE-2026-44400

MailEnable MailEnable Enterprise Premium — MailEnable Enterprise Premium < 10.55 Authorization Bypass via WebAdmin

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
35
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 28.5.285 × 205.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

MailEnable Enterprise Premium 10.55 and earlier contains an improper authorization vulnerability in the WebAdmin mobile portal that allows attackers to bypass authentication checks by reusing AuthenticationToken cookies generated for low-privileged users. Attackers can obtain a token from the WebMail login endpoint using the PersistentLogin parameter and replay it against the WebAdmin portal to perform highly privileged administrative actions.

Affected

ProductAffectedFixed inSource
MailEnable Enterprise Premium≤ 10.55–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulnCheck (CNA)8.7CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
VulnCheck (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refmailenable.com/Premium-ReleaseNotes.txtwriteupvulncheck.com/advisories/mailenable-enterprise-premium-authorization-bypass-via-webadmin