Skip to content
Threat Feed
Subscribe

Product

FreeMail (< 5.3.2)

1 brief RSS
high advisory

FreeMail: Authorization bypass in /api/create (CVE-2026-119049)

FreeMail versions before 5.3.2 contain an authorization bypass vulnerability allowing authenticated users to claim ownership of other mailboxes via the assignMailboxToUser functionality.

FreeMail
1t 1c