Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-125393

MailEnable Enterprise Premium before 10.62 Heap Overflow via IMAP X-FB-FETCH

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

MailEnable Enterprise Premium before 10.62 contains a heap overflow vulnerability in the IMAP X-FB-FETCH command that allows authenticated users to overflow a fixed 0x400-byte heap buffer. Attackers can supply an X-FB-USER address longer than about 1016 bytes, which is formatted without a length check, to crash the IMAP service and cause denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MailEnable MailEnable Enterprise Premium

Default version status: unaffected

  • 0 to < 10.62affected

References