MailEnable vulnerabilities
We track 15 vulnerabilities in MailEnable products across 2 products. 15 are rated high or critical, and none are known to be exploited. The most recent was published on November 12, 2026.
Latest MailEnable vulnerabilities
- 7.4 High severity
MailEnable: Improper Limitation of a Pathname to a Restricted Directory
MailEnable Save Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of MailEnable. Authentication is not required to exploit this vulnerability. The specific
- 9.8 Critical severity
MailEnable Enterprise Premium: Authorization Bypass Through User-Controlled Key
MailEnable Enterprise Premium 10.55 and earlier contains an improper authorization vulnerability in the WebAdmin mobile portal that allows attackers to bypass authentication checks by reusing AuthenticationToken cookies generated for low-privileged users. Atta
- 7.8 High severity
MailEnable: Cleartext Storage of Sensitive Information
MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover. The product stores user and administrative passwords in plaintext within AUTH.SAV with overly permiss
- 7.8 High severity
MailEnable: Cleartext Storage of Sensitive Information
MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover. The product stores user and administrative passwords in plaintext within AUTH.TAB with overly permiss
- 7.8 High severity
MailEnable: Uncontrolled Search Path Element
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIDP.DLL from its installation directory without sufficient integrity va
- 7.8 High severity
MailEnable: Uncontrolled Search Path Element
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIAU.DLL from its installation directory without sufficient integrity va
- 7.8 High severity
MailEnable: Uncontrolled Search Path Element
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIPC.DLL from its installation directory without sufficient integrity va
- 7.8 High severity
MailEnable: Uncontrolled Search Path Element
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAISP.DLL from its installation directory without sufficient integrity va
- 7.8 High severity
MailEnable: Uncontrolled Search Path Element
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIAM.DLL from its installation directory without sufficient integrity va
- 7.8 High severity
MailEnable: Uncontrolled Search Path Element
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAISM.DLL from its installation directory without sufficient integrity va
- 7.8 High severity
MailEnable: Uncontrolled Search Path Element
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIMF.DLL from its installation directory without sufficient integrity va
- 7.8 High severity
MailEnable: Uncontrolled Search Path Element
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAISO.DLL from its installation directory without sufficient integrity va
- 7.8 High severity
MailEnable: Uncontrolled Search Path Element
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIPO.DLL from its installation directory without sufficient integrity va
- 7.3 High severity
MailEnable: Uncontrolled Search Path Element
MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAINFY.DLL from its application directo without sufficient integrity vali
- 8.8 High severity
Mailenable: Improper Limitation of a Pathname to a Restricted Directory
Authenticated mail users, under specific circumstances, could add files with unsanitized content in public folders where the IIS user had permission to access. That action, could lead an attacker to store arbitrary code on that files and execute RCE commands.