CVE-2026-94131
Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0 - A subscriber could store a path in a file-type custom field and have AcyMailing delete that file when the field was cleared, including files outside the upload folder such as configuration.php.
| CWE | CWE-89 |
| Vendor | acymailing.com |
| Product | acymailing extension for joomla |
| Published | Sep 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for acymailing.com acymailing extension for joomla
Be the first to know when new unknown vulnerabilities affecting acymailing.com acymailing extension for joomla are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
acymailing.com / AcyMailing extension for Joomla
1.0.0-11.0.5