CVE-2026-44400

Analyzed Analyzed - Analysis Complete

Improper Authorization in MailEnable WebAdmin Mobile Portal

Publication date: 2026-05-08

Last updated on: 2026-06-01

Assigner: VulnCheck

Description

MailEnable Enterprise Premium 10.55 and earlier contains an improper authorization vulnerability in the WebAdmin mobile portal that allows attackers to bypass authentication checks by reusing AuthenticationToken cookies generated for low-privileged users. Attackers can obtain a token from the WebMail login endpoint using the PersistentLogin parameter and replay it against the WebAdmin portal to perform highly privileged administrative actions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-08

Last Modified

2026-06-01

Generated

2026-07-09

AI Q&A

2026-05-09

EPSS Evaluated

2026-07-08

NVD

CVE-2026-44400

Affected Vendors & Products

Vendor	Product	Version / Range
mailenable	mailenable	to 10.56 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-639	The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

Executive Summary

This vulnerability exists in MailEnable Enterprise Premium version 10.55 and earlier. It is an improper authorization flaw in the WebAdmin mobile portal that allows attackers to bypass authentication checks.

Attackers can exploit this by reusing AuthenticationToken cookies that were originally generated for low-privileged users. Specifically, they obtain a token from the WebMail login endpoint using the PersistentLogin parameter and then replay this token against the WebAdmin portal.

By doing so, attackers can perform highly privileged administrative actions without proper authorization.

Impact Analysis

This vulnerability can have serious impacts because it allows attackers to bypass authentication and gain administrative access to the WebAdmin portal.

Attackers can perform highly privileged administrative actions.
Unauthorized access to administrative functions can lead to data breaches, system manipulation, or disruption of services.
Since the vulnerability involves replaying authentication tokens, it can be exploited remotely without user interaction.

Hi! I’m here to help you understand CVE-2026-44400. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70