VYPR

freemail

by Idinging

Source repositories

CVEs (1)

  • CVE-2026-119049HigOct 29, 2026
    risk 0.42cvss 7.6epss 0.00

    FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another user's existing mailbox via the POST /api/create endpoint. Attackers who know a victim's address can become co-owners through assignMailboxToUser to read…