EIP-2026-100970

This advisory describes a broken access control vulnerability in McAfee Email Gateway (formerly IronMail) version 6.7.1, allowing Web Access users with Write rights to execute arbitrary actions due to improper profile checks. The vulnerability is local and requires authentication.