Vendor
MailEnable vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 28 vulnerabilities in MailEnable: 1 in the last 7 days and 3 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-125393, was published on 10 November 2026. 2 vulnerabilities in the last four weeks, up from none in the four before. 1 technology has a page of its own.
- Last 7 days
- 1
- Last 90 days
- 3
- Critical, all time
- 0
- Exploited in the wild
- 0
About MailEnable
Email and collaboration server software for Windows environments.
MailEnable technologies
Latest MailEnable vulnerabilities
- CVE-2026-125393: MailEnable Enterprise Premium heap overflow in IMAP X-FB-FETCHmediumCVSS 6.5
- CVE-2026-114552: MailEnable parseObjectResponse XML External Entity information disclosuremediumCVSS 6.5
- CVE-2026-114551: MailEnable Auth cleartext storage information disclosuremediumCVSS 5.9
- CVE-2026-44400: MailEnable Enterprise Premium auth bypass in WebAdmin mobile portalhighCVSS 8.1EPSS 0.0%
- CVE-2025-34428: MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local…highCVSS 7.8EPSS 0.1%
- CVE-2025-34427: MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local…highCVSS 7.8EPSS 0.1%
- CVE-2025-34424: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…highCVSS 7.8EPSS 0.2%
- CVE-2025-34423: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…highCVSS 7.8EPSS 0.2%
- CVE-2025-34422: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…highCVSS 7.8EPSS 0.2%
- CVE-2025-34421: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…highCVSS 7.8EPSS 0.2%
- CVE-2025-34420: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…highCVSS 7.8EPSS 0.2%
- CVE-2025-34419: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…highCVSS 7.8EPSS 0.2%
- CVE-2025-34418: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…highCVSS 7.8EPSS 0.2%
- CVE-2025-34417: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…highCVSS 7.8EPSS 0.2%
- CVE-2025-34416: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…highCVSS 7.8EPSS 0.2%
- CVE-2025-34425: MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the WindowContext…mediumCVSS 6.1EPSS 0.4%
- CVE-2025-34409: MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Failed…mediumCVSS 6.1EPSS 0.5%
- CVE-2025-34408: MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Added parameter…mediumCVSS 6.1EPSS 0.5%
- CVE-2025-34407: MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the theme parameter…mediumCVSS 6.1EPSS 0.5%
- CVE-2025-34406: MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Id parameter of…mediumCVSS 6.1EPSS 0.4%
- CVE-2025-34404: MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the InstanceScope…mediumCVSS 6.1EPSS 0.4%
- CVE-2025-34403: MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldTo…mediumCVSS 6.1EPSS 0.4%
- CVE-2025-34401: MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldBcc…mediumCVSS 6.1EPSS 0.4%
- CVE-2025-34400: MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesTo…mediumCVSS 6.1EPSS 0.4%
- CVE-2025-34399: MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesCc…mediumCVSS 6.1EPSS 0.4%
Most severe MailEnable vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-44400: MailEnable Enterprise Premium auth bypass in WebAdmin mobile portalhighCVSS 8.1EPSS 0.0%
- CVE-2025-34421: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…highCVSS 7.8EPSS 0.2%
- CVE-2025-34424: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…highCVSS 7.8EPSS 0.2%
- CVE-2025-34423: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…highCVSS 7.8EPSS 0.2%
- CVE-2025-34422: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…highCVSS 7.8EPSS 0.2%
- CVE-2025-34420: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…highCVSS 7.8EPSS 0.2%
- CVE-2025-34419: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…highCVSS 7.8EPSS 0.2%
- CVE-2025-34418: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…highCVSS 7.8EPSS 0.2%
- CVE-2025-34417: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…highCVSS 7.8EPSS 0.2%
- CVE-2025-34416: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…highCVSS 7.8EPSS 0.2%
Vulnerabilities per week
2 vulnerabilities in the last four weeks, up from none in the four before. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 2 | 0 | |
| 9 Nov 2026 | 1 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many MailEnable vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/mailenable)<a href="https://junglewise.ai/threats/vendors/mailenable"><img src="https://junglewise.ai/threats/vendors/mailenable/badge.svg" alt="MailEnable vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/mailenable.json, and this page as text at https://junglewise.ai/threats/vendors/mailenable.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "MailEnable vulnerabilities", https://junglewise.ai/threats/vendors/mailenable, 13 November 2026.