Mailerup CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Mailerup CVE published 2026-06-24

CVE-2026-13164

CVE-2026-13164 is a high-severity vulnerability in MailerUp versions before 1.0.1, allowing unauthenticated attackers to self-register accounts and access stored email data. This issue arises from a missing authentication mechanism in the RegisterView, which applies the AllowAny permission without requiring email verification, CAPTCHA, or administrator approval.