CyberSecBulletin

Idinging vulnerabilities

We track 1 vulnerability in Idinging products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 29, 2026.

1vulnerabilities
0critical
1high
0exploited
7.6average CVSS score

Latest Idinging vulnerabilities

  • 7.6 High severity

    FreeMail: Authorization Bypass Through User-Controlled Key

    CVE-2026-119049Idinging

    FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another user's existing mailbox via the POST /api/create endpoint. Attackers who know a victim's address can become co-owners through assignMailboxToU