CVE-2026-85749 - MailWatch: IDOR lets any authenticated user release or delete another tenant's quarantined mail
CVE ID :CVE-2026-85749 Published : Oct. 28, 2026, 11:17 p.m. | 1 hour, 7 minutes ago Description :MailWatch for MailScanner is a web-based front-end to MailScanner. Prior to 1.2.27, any authenticated MailWatch user, including the U/user, D/domain-admin, and H/host roles, can release to inbox...