CVE-2026-119049 | idinging FreeMail up to 5.3.1 Mailbox /api/create authorization

October 29, 2026 Yanac

A vulnerability was found in idinging FreeMail up to 5.3.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/create of the component Mailbox. This manipulation causes authorization bypass.

This vulnerability is tracked as CVE-2026-119049. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More