# MailEnable vulnerabilities Source: https://junglewise.ai/threats/vendors/mailenable Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/mailenable.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 28 vulnerabilities in MailEnable: 1 in the last 7 days and 3 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-125393, was published on 10 November 2026. 2 vulnerabilities in the last four weeks, up from none in the four before. 1 technology has a page of its own. ## Counts - Last 7 days: 1 - Last 30 days: 3 - Last 90 days: 3 - All time: 28 (0 critical, 0 exploited in the wild) ## About MailEnable Email and collaboration server software for Windows environments. ## Latest MailEnable vulnerabilities - [CVE-2026-125393: MailEnable Enterprise Premium heap overflow in IMAP X-FB-FETCH](https://junglewise.ai/threats/cve-2026-125393-mailenable-enterprise-premium-before-10-62-contains-a-heap) (medium, CVSS 6.5, published 10 Nov 2026) - [CVE-2026-114552: MailEnable parseObjectResponse XML External Entity information disclosure](https://junglewise.ai/threats/cve-2026-114552-mailenable-parseobjectresponse-xml-external-entity-processing) (medium, CVSS 6.5, published 4 Nov 2026) - [CVE-2026-114551: MailEnable Auth cleartext storage information disclosure](https://junglewise.ai/threats/cve-2026-114551-mailenable-auth-cleartext-storage-information-disclosure) (medium, CVSS 5.9, published 4 Nov 2026) - [CVE-2026-44400: MailEnable Enterprise Premium auth bypass in WebAdmin mobile portal](https://junglewise.ai/threats/cve-2026-44400-mailenable-enterprise-premium-auth-bypass-in-webadmin-mobile) (high, CVSS 8.1, published 8 May 2026) - [CVE-2025-34428: MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local…](https://junglewise.ai/threats/cve-2025-34428-mailenable-versions-prior-to-10-54-contain-a-cleartext-storage-of) (high, CVSS 7.8, published 10 Dec 2025) - [CVE-2025-34427: MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local…](https://junglewise.ai/threats/cve-2025-34427-mailenable-versions-prior-to-10-54-contain-a-cleartext-storage-of) (high, CVSS 7.8, published 10 Dec 2025) - [CVE-2025-34424: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…](https://junglewise.ai/threats/cve-2025-34424-mailenable-versions-prior-to-10-54-contain-an-unsafe-dll-loading) (high, CVSS 7.8, published 10 Dec 2025) - [CVE-2025-34423: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…](https://junglewise.ai/threats/cve-2025-34423-mailenable-versions-prior-to-10-54-contain-an-unsafe-dll-loading) (high, CVSS 7.8, published 10 Dec 2025) - [CVE-2025-34422: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…](https://junglewise.ai/threats/cve-2025-34422-mailenable-versions-prior-to-10-54-contain-an-unsafe-dll-loading) (high, CVSS 7.8, published 10 Dec 2025) - [CVE-2025-34421: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…](https://junglewise.ai/threats/cve-2025-34421-mailenable-versions-prior-to-10-54-contain-an-unsafe-dll-loading) (high, CVSS 7.8, published 10 Dec 2025) - [CVE-2025-34420: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…](https://junglewise.ai/threats/cve-2025-34420-mailenable-versions-prior-to-10-54-contain-an-unsafe-dll-loading) (high, CVSS 7.8, published 10 Dec 2025) - [CVE-2025-34419: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…](https://junglewise.ai/threats/cve-2025-34419-mailenable-versions-prior-to-10-54-contain-an-unsafe-dll-loading) (high, CVSS 7.8, published 10 Dec 2025) - [CVE-2025-34418: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…](https://junglewise.ai/threats/cve-2025-34418-mailenable-versions-prior-to-10-54-contain-an-unsafe-dll-loading) (high, CVSS 7.8, published 10 Dec 2025) - [CVE-2025-34417: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…](https://junglewise.ai/threats/cve-2025-34417-mailenable-versions-prior-to-10-54-contain-an-unsafe-dll-loading) (high, CVSS 7.8, published 10 Dec 2025) - [CVE-2025-34416: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…](https://junglewise.ai/threats/cve-2025-34416-mailenable-versions-prior-to-10-54-contain-an-unsafe-dll-loading) (high, CVSS 7.8, published 10 Dec 2025) - [CVE-2025-34425: MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the WindowContext…](https://junglewise.ai/threats/cve-2025-34425-mailenable-versions-prior-to-10-54-contain-a-reflected-cross-site) (medium, CVSS 6.1, published 9 Dec 2025) - [CVE-2025-34409: MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Failed…](https://junglewise.ai/threats/cve-2025-34409-mailenable-versions-prior-to-10-54-contain-a-reflected-cross-site) (medium, CVSS 6.1, published 9 Dec 2025) - [CVE-2025-34408: MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Added parameter…](https://junglewise.ai/threats/cve-2025-34408-mailenable-versions-prior-to-10-54-contain-a-reflected-cross-site) (medium, CVSS 6.1, published 9 Dec 2025) - [CVE-2025-34407: MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the theme parameter…](https://junglewise.ai/threats/cve-2025-34407-mailenable-versions-prior-to-10-54-contain-a-reflected-cross-site) (medium, CVSS 6.1, published 9 Dec 2025) - [CVE-2025-34406: MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Id parameter of…](https://junglewise.ai/threats/cve-2025-34406-mailenable-versions-prior-to-10-54-contain-a-reflected-cross-site) (medium, CVSS 6.1, published 9 Dec 2025) - [CVE-2025-34404: MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the InstanceScope…](https://junglewise.ai/threats/cve-2025-34404-mailenable-versions-prior-to-10-54-contain-a-reflected-cross-site) (medium, CVSS 6.1, published 9 Dec 2025) - [CVE-2025-34403: MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldTo…](https://junglewise.ai/threats/cve-2025-34403-mailenable-versions-prior-to-10-54-contain-a-reflected-cross-site) (medium, CVSS 6.1, published 9 Dec 2025) - [CVE-2025-34401: MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldBcc…](https://junglewise.ai/threats/cve-2025-34401-mailenable-versions-prior-to-10-54-contain-a-reflected-cross-site) (medium, CVSS 6.1, published 9 Dec 2025) - [CVE-2025-34400: MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesTo…](https://junglewise.ai/threats/cve-2025-34400-mailenable-versions-prior-to-10-54-contain-a-reflected-cross-site) (medium, CVSS 6.1, published 9 Dec 2025) - [CVE-2025-34399: MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesCc…](https://junglewise.ai/threats/cve-2025-34399-mailenable-versions-prior-to-10-54-contain-a-reflected-cross-site) (medium, CVSS 6.1, published 9 Dec 2025) ## Most severe MailEnable vulnerabilities - [CVE-2026-44400: MailEnable Enterprise Premium auth bypass in WebAdmin mobile portal](https://junglewise.ai/threats/cve-2026-44400-mailenable-enterprise-premium-auth-bypass-in-webadmin-mobile) (high, CVSS 8.1, published 8 May 2026) - [CVE-2025-34421: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…](https://junglewise.ai/threats/cve-2025-34421-mailenable-versions-prior-to-10-54-contain-an-unsafe-dll-loading) (high, CVSS 7.8, published 10 Dec 2025) - [CVE-2025-34424: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…](https://junglewise.ai/threats/cve-2025-34424-mailenable-versions-prior-to-10-54-contain-an-unsafe-dll-loading) (high, CVSS 7.8, published 10 Dec 2025) - [CVE-2025-34423: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…](https://junglewise.ai/threats/cve-2025-34423-mailenable-versions-prior-to-10-54-contain-an-unsafe-dll-loading) (high, CVSS 7.8, published 10 Dec 2025) - [CVE-2025-34422: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…](https://junglewise.ai/threats/cve-2025-34422-mailenable-versions-prior-to-10-54-contain-an-unsafe-dll-loading) (high, CVSS 7.8, published 10 Dec 2025) - [CVE-2025-34420: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…](https://junglewise.ai/threats/cve-2025-34420-mailenable-versions-prior-to-10-54-contain-an-unsafe-dll-loading) (high, CVSS 7.8, published 10 Dec 2025) - [CVE-2025-34419: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…](https://junglewise.ai/threats/cve-2025-34419-mailenable-versions-prior-to-10-54-contain-an-unsafe-dll-loading) (high, CVSS 7.8, published 10 Dec 2025) - [CVE-2025-34418: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…](https://junglewise.ai/threats/cve-2025-34418-mailenable-versions-prior-to-10-54-contain-an-unsafe-dll-loading) (high, CVSS 7.8, published 10 Dec 2025) - [CVE-2025-34417: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…](https://junglewise.ai/threats/cve-2025-34417-mailenable-versions-prior-to-10-54-contain-an-unsafe-dll-loading) (high, CVSS 7.8, published 10 Dec 2025) - [CVE-2025-34416: MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code…](https://junglewise.ai/threats/cve-2025-34416-mailenable-versions-prior-to-10-54-contain-an-unsafe-dll-loading) (high, CVSS 7.8, published 10 Dec 2025) ## Vulnerabilities per week 2 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 2 | 0 | 0 | | 9 Nov 2026 | 1 | 0 | 0 | ## MailEnable technologies - [Mailenable](https://junglewise.ai/threats/technologies/mailenable): 28 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "MailEnable vulnerabilities", https://junglewise.ai/threats/vendors/mailenable, 13 November 2026.