Posted by Alessandro Bertoldi BCS via Fulldisclosure on Jun 20CVE-2025-68624: Cross-Tenant Authentication Bypass by Spoofing in N-able Mail Assure CVE ID: CVE-2025-68624 Status: DISPUTED CWE: CWE-290 (Authentication Bypass by Spoofing) Affected Product: N-able Mail Assure (formerly SolarWinds MSP Mail Assure) Affected Service: N-able Mail Assure cloud-based multi-tenant SMTP relay infrastructure Vendor: N-able Technologies Initial Discovery: October 2018 Public Disclosure: November 2025, DeepSec Vienna...