CVE-2026-114551— MailEnable Auth Cleartext Storage Information Disclosure Vulnerability

Quick assessment

Affected

MailEnable MailEnable

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

MailEnable 认证明文存储导致信息泄露漏洞。该漏洞允许远程攻击者在受影响的 MailEnable 安装中泄露敏感信息，且利用此漏洞无需进行身份验证。该缺陷具体存在于邮箱凭据的处理过程中，其根源在于将敏感信息以明文形式存储。攻击者可利用此漏洞结合其他漏洞来泄露已存储的凭据，进而导致系统被进一步攻陷。该漏洞编号为 ZDI-CAN-34478。

AI Predicted 5.3 Difficulty: Easy Updated Nov 04, 2026

Possible ATT&CK Techniques 2 AI

T1530.001 T1190 · Exploit Public-Facing Application

Updated Nov 04, 2026

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

MailEnable Auth Cleartext Storage Information Disclosure Vulnerability

Source: CVE Program / CVE List V5

Vulnerability Description

MailEnable Auth Cleartext Storage Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of MailEnable. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of mailbox credentials. The issue results from storing sensitive information in plaintext. An attacker can leverage this in conjunction with other vulnerabilities to disclose stored credentials, leading to further compromise. Was ZDI-CAN-34478.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

敏感数据的明文存储

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
MailEnable	MailEnable	10.59	-

II. Public POCs for CVE-2026-114551

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-114551

请登录查看更多情报信息。

Other References for CVE-2026-114551 (1)

https://www.zerodayinitiative.com/advisories/ZDI-26-810/ x_research-advisory

https://www.cve.org/CVERecord?id=CVE-2026-114551

IV. Related Vulnerabilities

Same product: MailEnable

Same vendor: MailEnable

Same weakness: CWE-312