CVE-2026-15192

Name of the Vulnerable Software and Affected Versions mettle sendportal versions prior to 3.0.2

Description An issue in the APIv1 Webhooks component allows remote attackers to bypass authentication. This occurs within the sendgrid/postmark/postal/mailjet functions, where improper manipulation leads to missing authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the sendgrid/postmark/postal/mailjet functions within the APIv1 Webhooks component.