CVE-2026-44400
Analyzed Analyzed - Analysis Complete
Improper Authorization in MailEnable WebAdmin Mobile Portal

Publication date: 2026-05-08

Last updated on: 2026-06-01

Assigner: VulnCheck

Description
MailEnable Enterprise Premium 10.55 and earlier contains an improper authorization vulnerability in the WebAdmin mobile portal that allows attackers to bypass authentication checks by reusing AuthenticationToken cookies generated for low-privileged users. Attackers can obtain a token from the WebMail login endpoint using the PersistentLogin parameter and replay it against the WebAdmin portal to perform highly privileged administrative actions.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-08
Last Modified
2026-06-01
Generated
2026-06-19
AI Q&A
2026-05-09
EPSS Evaluated
2026-06-18
NVD
CVE-2026-44400
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
mailenable mailenable to 10.56 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in MailEnable Enterprise Premium version 10.55 and earlier. It is an improper authorization flaw in the WebAdmin mobile portal that allows attackers to bypass authentication checks.

Attackers can exploit this by reusing AuthenticationToken cookies that were originally generated for low-privileged users. Specifically, they obtain a token from the WebMail login endpoint using the PersistentLogin parameter and then replay this token against the WebAdmin portal.

By doing so, attackers can perform highly privileged administrative actions without proper authorization.

Impact Analysis

This vulnerability can have serious impacts because it allows attackers to bypass authentication and gain administrative access to the WebAdmin portal.

  • Attackers can perform highly privileged administrative actions.
  • Unauthorized access to administrative functions can lead to data breaches, system manipulation, or disruption of services.
  • Since the vulnerability involves replaying authentication tokens, it can be exploited remotely without user interaction.
Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-44400. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart