https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-02T04:33:33.787114+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-94132 CVE-2026-94132 — Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterpr… 2026-10-02T04:33:33.788946+00:00

Affected: acymailing.com AcyMailing Enterprise extension for Joomla

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - MIME parts of incoming emails were saved to media/com_acym/upload/ with no extension check, so anyone who could email the monitored mailbox could write a PHP file into the web root.