CVE-2026-51144 in MailZen Management Portal

Summary

by MITRE • 08/05/2026

Cross Site Scripting vulnerability in Soliton Systems MailZen Management Protal v.2.62, v.2.63 allows a remote attacker to execute arbitrary code via the Role Name, First Name, Last Name, and Username fields.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsible: MITRE
• Reservation: 06/07/2026
• Disclosure: 08/05/2026
• Moderation: accepted
• Entry: VDB-385984
• CPE: ready
• CWE: CWE-79 (confirmed)
• CVSS: 3.5 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-51144
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-51144
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-51144/