Read the docs

idinging

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

idinging records in CISA KEV

No idinging vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-82407 CVE-2026-119049 · GHSA-7mjv-78r5-wjqw

Authorization bypass in FreeMail lets users claim other users' mailboxes

Priority LOW 32

FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another user's existing mailbox via the POST /api/create endpoint.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00386 Published 2026-10-29 Fixed in 5.3.2 CWE-639
Open these records in search →