CVE-2025-68624: Cross-Tenant Authentication Bypass by Spoofing in N-able Mail Assure

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-06-21 03:49 UTC
Importiert: 2026-06-21 04:51 UTC
Quelle-ID: full_disc
uid_hash: ad87c4a59d0476429cc4f0201e386b34d6377c72c3b333dbf23da058bdfa0e20

Full Disclosure

Posted by Alessandro Bertoldi BCS via Fulldisclosure on Jun 20 CVE-2025-68624: Cross-Tenant Authentication Bypass by Spoofing in N-able Mail Assure

CVE ID: CVE-2025-68624

Status: DISPUTED

CWE: CWE-290 (Authentication Bypass by Spoofing)

Affected Product: N-able Mail Assure (formerly SolarWinds MSP Mail Assure)

Affected Service: N-able Mail Assure cloud-based multi-tenant SMTP relay infrastructure

Vendor: N-able Technologies

Initial Discovery: October 2018

Public Disclosure: November 2025, DeepSec Vienna...

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2025-68624

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss