SEPTEMBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-57739

CRITICAL · CVSS 9.3 EPSS 0.28%

Source: NVD + CISA KEV + EPSS · Published 2026-07-13 · Last synced 2026-08-12

CyberRota Analysis

AI-Generated

AcyMailing SMTP Newsletter versions up to 10.11.0 are vulnerable to a Blind SQL Injection attack due to improper handling of special elements in SQL commands. This critical vulnerability could allow attackers to manipulate database queries, potentially leading to unauthorized data access or data exfiltration. Organizations using affected versions of AcyMailing should prioritize immediate remediation to mitigate the risk of exploitation.

CVE
CVE-2026-57739
Severity
CRITICAL
CVSS
9.3
EPSS
0.28%

Original NVD Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Blind SQL Injection.This issue affects AcyMailing SMTP Newsletter: from n/a through <= 10.11.0.