CVE-2026-85749

Prior to version 1.2.27 , MailWatch for MailScanner (a web-based front-end for MailScanner) is vulnerable to an IDOR vulnerability. Authenticated users, including those with low-privilege roles like U/user , D/domain-admin , and H/host , can release to inbox or permanently delete quarantined mail...