CVE-2026-57740
published 2026-07-13CVE-2026-57740: Missing Authorization vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Exploiting Incorrectly Configured Access Control…
PriorityP338high7.1CVSS 3.1
AVNACLPRLUINSUCNILAH
EPSS
0.32%
25.3th percentile
Missing Authorization vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AcyMailing SMTP Newsletter: from n/a through <= 10.11.1.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| acymailing_newsletter_team | acymailing_smtp_newsletter | <= 10.11.1 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
AcyMailing SMTP Newsletter Plugin up to 10.11.1 on WordPress authorization (EUVD-2026-43382)
vuldb·2026-07-13·CVSS 7.1
CVE-2026-57740 [HIGH] AcyMailing SMTP Newsletter Plugin up to 10.11.1 on WordPress authorization (EUVD-2026-43382)
A vulnerability described as problematic has been identified in AcyMailing SMTP Newsletter Plugin up to 10.11.1 on WordPress. This affects an unknown function. The manipulation results in missing authorization.
This vulnerability is reported as CVE-2026-57740. The attack can be launched remotely. No exploit exists.
GHSA
Missing Authorization vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AcyMa
ghsa_unreviewed·2026-07-13
CVE-2026-57740 [HIGH] CWE-862 Missing Authorization vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AcyMa
Missing Authorization vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AcyMailing SMTP Newsletter: from n/a through <= 10.11.1.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-07-13
Published