CVE-2026-113599 | Modoboa up to 2.7.x Auto-Reply Management /api/v2/armessages mbox authorization

October 20, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Modoboa up to 2.7.x. This impacts an unknown function of the file /api/v2/armessages of the component Auto-Reply Management. Performing a manipulation of the argument mbox results in authorization bypass.

This vulnerability is identified as CVE-2026-113599. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More