Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

MailEssentials AI — Vulnerabilities & Security Advisories 18

All 18 CVE vulnerabilities found in MailEssentials AI, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses affecting MailEssentials AI, a mail filtering and security product developed by MessageLabs, specifically focusing on authentication flaws and privilege escalation vulnerabilities tagged as high severity. The collection encompasses a comprehensive history of disclosed issues reported between early 2023 and the present, including both publicly patched defects and those requiring immediate vendor attention. Visitors can utilize this resource to track the latest security advisories issued by the vendor, gain a deeper understanding of how specific weakness classes impact email gateway architectures, or review the complete vulnerability timeline for this product to assess historical risk exposure. The data presented here is derived from trusted vulnerability databases and official security bulletins, ensuring that administrators and researchers have access to accurate, up-to-date information regarding potential threats to their mail infrastructure. By consolidating these disparate reports into a single view, the page facilitates efficient risk assessment and helps organizations prioritize remediation efforts based on the severity and exploitability of identified flaws without requiring navigation across multiple external sources. This centralized approach supports proactive security management by highlighting patterns in how the product has been targeted over time, enabling better long-term defense strategies against evolving attack vectors.

Vendor: GFI Software

CVE ID Title CVSS Severity Published
CVE-2026-23621 GFI MailEssentials AI < 22.4 ListServer.IsPathExist() Absolute Directory Traversal to File Enumeration CWE-203 4.3 Medium 2026-02-19
CVE-2026-23620 GFI MailEssentials AI < 22.4 ListServer.IsDBExist() Absolute Directory Traversal to File Enumeration CWE-203 4.3 Medium 2026-02-19
CVE-2026-23619 GFI MailEssentials AI < 22.4 General Settings Local Domains Domain Description Stored XSS CWE-79 5.4 Medium 2026-02-19
CVE-2026-23618 GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Subject Condition Stored XSS CWE-79 5.4 Medium 2026-02-19
CVE-2026-23617 GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Body Condition Stored XSS CWE-79 5.4 Medium 2026-02-19
CVE-2026-23616 GFI MailEssentials AI < 22.4 Anti-Spam Anti-Spoofing Description Stored XSS CWE-79 5.4 Medium 2026-02-19
CVE-2026-23615 GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework Email Exceptions Description Stored XSS CWE-79 5.4 Medium 2026-02-19
CVE-2026-23614 GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework IP Exceptions Description Stored XSS CWE-79 5.4 Medium 2026-02-19
CVE-2026-23613 GFI MailEssentials AI < 22.4 Anti-Spam URI DNS Blocklist Domain Stored XSS CWE-79 5.4 Medium 2026-02-19
CVE-2026-23612 GFI MailEssentials AI < 22.4 Anti-Spam IP DNS Blocklist Domain Stored XSS CWE-79 5.4 Medium 2026-02-19
CVE-2026-23611 GFI MailEssentials AI < 22.4 Anti-Spam IP Blocklist Description Stored XSS CWE-79 5.4 Medium 2026-02-19
CVE-2026-23610 GFI MailEssentials AI < 22.4 POP2Exchange POP3 Server Login Stored XSS CWE-79 5.4 Medium 2026-02-19
CVE-2026-23609 GFI MailEssentials AI < 22.4 General Settings Perimeter SMTP Servers Description Stored XSS CWE-79 5.4 Medium 2026-02-19
CVE-2026-23608 GFI MailEssentials AI < 22.4 Email Management Mail Monitoring Rule Stored XSS CWE-79 5.4 Medium 2026-02-19
CVE-2026-23607 GFI MailEssentials AI < 22.4 Anti-Spam Whitelist Description Stored XSS CWE-79 5.4 Medium 2026-02-19
CVE-2026-23606 GFI MailEssentials AI < 22.4 Advanced Content Filtering Rule Stored XSS CWE-79 5.4 Medium 2026-02-19
CVE-2026-23605 GFI MailEssentials AI < 22.4 Attachment Filtering Rule Stored XSS CWE-79 5.4 Medium 2026-02-19
CVE-2026-23604 GFI MailEssentials AI < 22.4 Keyword Filtering Rule Stored XSS CWE-79 5.4 Medium 2026-02-19

All 18 known CVE vulnerabilities affecting MailEssentials AI with full Chinese analysis, references, and POCs where available.