CVE-2026-114552

Name of the Vulnerable Software and Affected Versions MailEnable (affected versions not specified)

Description An issue exists in the parseObjectResponse() function that allows remote authenticated attackers to disclose sensitive information. The flaw is caused by the improper restriction of XML External Entity (XXE) references, which are references to external files or URLs within an XML document. This allows an attacker to retrieve data in the context of the service account.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.