FreeMail vulnerabilities

CVEs whose affected-version data names the FreeMail package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119049High· 7.6

1w ago

FreeMail before 5.3.2 Authorization Bypass via /api/create Mailbox Claiming

FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another user's existing mailbox via the POST /api/create endpoint. Attackers who know a victim's address can become co-owners t…

▾ Twilightidinging · FreeMailEPSS 0.39%via CVEORG