CVE-2019-11836: Rediff Rediffmail

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

The Rediffmail (aka com.rediff.mail.and) application 2.2.6 for Android has cleartext mail content in file storage, persisting after a logout.

Affected products

• Rediff Rediffmail: version 2.2.6 only

Published 2019-05-09. Last modified 2026-06-17.