CVE-2026-66358

MEDIUM 6.1

CVSS Score

6.1

EPSS Score

0.0%

EPSS Percentile

0th

A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script.

Vendor	extra innovation inc.
Product	acmailer cgi
Published	Aug 19, 2026

Stay Ahead of the Next One

Get instant alerts for extra innovation inc. acmailer cgi

Be the first to know when new medium vulnerabilities affecting extra innovation inc. acmailer cgi are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Versions

Extra Innovation Inc. / acmailer CGI

0 < 4.1.2

Extra Innovation Inc. / acmailer DB

0 < 1.2.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

acmailer.jp: https://www.acmailer.jp/info/de.cgi?id=119 jvn.jp: https://jvn.jp/en/jp/JVN47716829/