CVE-2026-119049

FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another user's existing mailbox via the POST /api/create endpoint. Attackers who know a victim's address can become co-owners through assignMailboxToUser to read messages and verification...

CVE-2026-119049

FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another user's existing mailbox via the POST /api/create endpoint. Attackers who know a victim's address can become co-owners through assignMailboxToUser to read messages and verification...

EUVD-2026-112815

FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another user's existing mailbox via the POST /api/create endpoint. Attackers who know a victim's address can become co-owners through assignMailboxToUser to read messages and verification...

CVE-2026-119049: idinging FreeMail: FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another…

FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another user's existing mailbox via the POST /api/create endpoint. Attackers who know a victim's address can become co-owners through assignMailboxToUser to read messages and verification...

FreeMail authorization issue vulnerability

Versions of FreeMail prior to 5.3.2 contain an authorization issue vulnerability stemming from authorization bypass. This allows authenticated users to claim existing email accounts belonging to other users via the POST /api/create endpoint. As a result, attackers who know the victim’s address ca...

PT-2026-132123

FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another user's existing mailbox via the POST /api/create endpoint. Attackers who know a victim's address can become co-owners through assignMailboxToUser to read messages and verification...

Ollama CVE-2026-7482 GGUF OOB Read Detect

Detects CVE-2026-7482 in ollama/ollama 0.17.1: uploads a malicious GGUF declaring a 1024×1024 F16 tensor in a 512-byte file and triggers POST /api/create with quantize=Q80. Vulnerable servers return "status":"success" and materialize a 1.1 MB Q80 layer from heap OOB reads; patched servers reject...