Acmailer - Improper Access Control to OS Command Injection

Improper access control vulnerability in acmailer ver. 4.0.1 and earlier, and acmailer DB ver. 1.1.3 and earlier allows remote attackers to execute an arbitrary OS command, or gain an administrative privilege which may result in obtaining the sensitive information on the server via unspecified...

CVE-2026-70408

An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileges...

CVE-2026-66358

A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script...

CVE-2026-70408

acmailer has an incorrect authorization flaw allowing low-privilege users to create sub-accounts with full administrative privileges (CVSS 8.8 HIGH, network-accessible). JPCERT/CC advisory JVN47716829 and vendor notice are referenced; no exploit or patch details are provided in the documents. Mon...

CVE-2026-70408

An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileges...

EUVD-2026-62238

An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileges...

EUVD-2026-62237

A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script...

CVE-2026-66358

A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script...

CVE-2026-66358

acmailer has a cross-site scripting (XSS) vulnerability allowing an unauthenticated remote attacker to inject arbitrary script. CVSS 3.0 scores it MEDIUM (6.1) with user interaction required. No in-the-wild exploitation or specific affected versions are reported; monitor vendor advisories for pat...

PT-2026-78268

Name of the Vulnerable Software and Affected Versions acmailer affected versions not specified Description A cross-site scripting XSS issue exists, which may allow an attacker to execute an arbitrary script. Cross-site scripting is a type of security flaw where malicious scripts are injected into...

CVE-2023-49780

Cross-site scripting vulnerability exists in acmailer CGI ver.4.0.5 and earlier. An arbitrary script may be executed on the web browser of the user who accessed the management page of the affected product...

EUVD-2015-3054

Malware in sbrugna...

EUVD-2014-3833

Malware in sbrugna...

EUVD-2016-2246

Malware in sbrugna...

EUVD-2025-4863

Malicious code in bioql PyPI...

EUVD-2025-4969

Malicious code in bioql PyPI...

EUVD-2021-8036

Malicious code in bioql PyPI...

EUVD-2021-8035

Malicious code in bioql PyPI...

CVE-2021-20617

Improper access control vulnerability in acmailer ver. 4.0.1 and earlier, and acmailer DB ver. 1.1.3 and earlier allows remote attackers to execute an arbitrary OS command, or gain an administrative privilege which may result in obtaining the sensitive information on the server via unspecified...

CVE-2021-20618

Privilege chaining vulnerability in acmailer ver. 4.0.2 and earlier, and acmailer DB ver. 1.1.4 and earlier allows remote attackers to bypass authentication and to gain an administrative privilege which may result in obtaining the sensitive information on the server via unspecified vectors...