CVE-2026-85749 | MailWatch up to 1.2.26 Quarantine functions.php quarantine_list_items id access control

October 29, 2026 Yanac

A vulnerability marked as problematic has been reported in MailWatch up to 1.2.26. Impacted is the function quarantine_list_items of the file mailscanner/functions.php of the component Quarantine. This manipulation of the argument ID causes improper access controls.

This vulnerability is tracked as CVE-2026-85749. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More