acyba

Top products

The 10 most recently published vulnerabilities affecting acyba.

• CVE-2026-15426AcyMailing <= 10.11.1 - Authenticated (Subscriber+) Missing Authorization to Account Takeover via Notification Template Update8.8Aug 11, 2026
• CVE-2026-12170AcyMailing <= 10.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'alignment' Attribute6.4Jul 9, 2026
• CVE-2026-5200AcyMailing <= 10.8.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'acymailing_router'8.8May 20, 2026
• CVE-2026-3614AcyMailing 9.11.0 - 10.8.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation8.8Apr 16, 2026
• CVE-2024-7384AcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function7.5Aug 22, 2024
• CVE-2023-39970Extension - acymailing.com - RCE in AcyMailing component for Joomla 6.7.0-8.5.09.8Aug 17, 2023
• CVE-2020-10934Acyba AcyMailing before 6.9.2 mishandles file uploads by admins.7.2Mar 24, 2020
• CVE-2015-7338SQL Injection exists in AcyMailing Joomla Component before 4.9.5 via exportgeolocorder in a geolocation_longitude request to index.php.7.2Mar 9, 2020
• CVE-2018-9107CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcyMailing extension before 5.9.6 for Joomla! via a value that is mishandled in a CSV export.8.8Mar 28, 2018
• CVE-2018-9106CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcySMS extension before 3.5.1 for Joomla! via a value that is mishandled in a CSV export.8.8Mar 28, 2018