What’s Vulnerable › Vulnerabilities

CVE-2026-44400: MailEnable Enterprise Premium < 10.55 Authorization Bypass via WebAdmin

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-08 · updated 2026-10-26
• Weakness: CWE-639

Description

MailEnable Enterprise Premium 10.55 and earlier contains an improper authorization vulnerability in the WebAdmin mobile portal that allows attackers to bypass authentication checks by reusing AuthenticationToken cookies generated for low-privileged users. Attackers can obtain a token from the WebMail login endpoint using the PersistentLogin parameter and replay it against the WebAdmin portal to perform highly privileged administrative actions.

Affected products

• MailEnable: before 10.56 — fixed in 10.56

How to fix

Upgrade to a fixed version: MailEnable 10.56. Check the vendor advisory for mitigations.

References

• https://www.mailenable.com/Premium-ReleaseNotes.txt
• https://www.vulncheck.com/advisories/mailenable-enterprise-premium-authorization-bypass-via-webadmin

Get alerted when CVE-2026-44400 or the next vulnerability affects your stack