acymailing vulnerabilities

CVEs whose affected-version data names the acymailing package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

4 CVEsRSS

CVE-2026-105318High· 7.1

3w ago

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Datasolution AcyMailing SMTP Newsletter acymailing allows Reflected XSS.This issue affects AcyMailing SMTP Newsletter: from n/a through…

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Datasolution AcyMailing SMTP Newsletter acymailing allows Reflected XSS.This issue affects AcyMailing SMTP Newsletter: from n/a through…

▾ TwilightDatasolution · acymailingEPSS 0.14%via NVD

CVE-2026-95588High· 8.6

1mo ago

Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter <= 11.0.5 versions.

▾ TwilightAcyMailing Newsletter Team · acymailingEPSS 0.34%via NVD

CVE-2026-94389Critical· 9.0

1mo ago

Unauthenticated Remote Code Execution (RCE) in AcyMailing SMTP Newsletter <= 11.0.5 versions.

▾ MidnightAcyMailing Newsletter Team · acymailingEPSS 0.45%via NVD

CVE-2026-56292High· 7.5PoC

3mo ago

A SQLi vulnerability in AcyMailing component < 10.11.1 for Joomla was discovered

A SQLi vulnerability in AcyMailing component < 10.11.1 for Joomla was discovered. Exploiting this flaw can lead to unauthorized database access and data leakage.

▾ Midnightacymailing · acymailingEPSS 1.4%via NVD