ZDI-26-811
MEDIUM 6.5
Published
Oct 27, 2026
MailEnable parseObjectResponse XML External Entity Processing Information Disclosure Vulnerability
MailEnable
This vulnerability allows remote attackers to disclose sensitive information on affected installations of MailEnable. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5.