Acymailing Newsletter Team Acymailing Smtp Newsletter vulnerabilities
8 known vulnerabilities affecting acymailing_newsletter_team/acymailing_smtp_newsletter.
Total CVEs
8
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL2HIGH4MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2026-57739P1CRITICALCVSS 9.3Exploited≤ 10.11.02026-07-13
CVE-2026-57739 [CRITICAL] CWE-89 CVE-2026-57739: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Blind SQL Injection.This issue affects AcyMailing SMTP Newsletter: from n/a through <= 10.11.0.
nvd
CVE-2026-94389P2CRITICALCVSS 9.0≥ n/a, ≤ 11.0.52026-09-30
CVE-2026-94389 [CRITICAL] CWE-94 CVE-2026-94389: Unauthenticated Remote Code Execution (RCE) in AcyMailing SMTP Newsletter <= 11.0.5 versions.
Unauthenticated Remote Code Execution (RCE) in AcyMailing SMTP Newsletter <= 11.0.5 versions.
nvd
CVE-2026-95588P3HIGHCVSS 8.6≥ n/a, ≤ 11.0.52026-10-01
CVE-2026-95588 [HIGH] CWE-22 CVE-2026-95588: Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter <= 11.0.5 versions.
Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter <= 11.0.5 versions.
nvd
CVE-2026-28181P3MEDIUMCVSS 6.5≥ n/a, ≤ 10.11.12026-08-13
CVE-2026-28181 [MEDIUM] CWE-862 CVE-2026-28181: Subscriber Broken Access Control in AcyMailing SMTP Newsletter <= 10.11.1 versions.
Subscriber Broken Access Control in AcyMailing SMTP Newsletter <= 10.11.1 versions.
nvd
CVE-2026-57740P3HIGHCVSS 7.1≤ 10.11.12026-07-13
CVE-2026-57740 [HIGH] CWE-862 CVE-2026-57740: Missing Authorization vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymail
Missing Authorization vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AcyMailing SMTP Newsletter: from n/a through <= 10.11.1.
nvd
CVE-2026-57741P4HIGHCVSS 7.1≤ 10.11.02026-07-13
CVE-2026-57741 [HIGH] CWE-79 CVE-2026-57741: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Stored XSS.This issue affects AcyMailing SMTP Newsletter: from n/a through <= 10.11.0.
nvd
CVE-2026-28182P4MEDIUMCVSS 6.5≥ n/a, ≤ 10.11.12026-08-13
CVE-2026-28182 [MEDIUM] CWE-79 CVE-2026-28182: Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions.
Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions.
nvd
CVE-2025-24617P4HIGHCVSS 7.1≤ 9.11.12025-02-14
CVE-2025-24617 [HIGH] CWE-79 CVE-2025-24617: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Reflected XSS.This issue affects AcyMailing SMTP Newsletter: from n/a through < 9.11.1.
nvd