CVE-2026-95588

AcyMailing versions up to 11.0.5 are vulnerable to unauthenticated arbitrary file deletion, allowing attackers to delete arbitrary files on the server without authentication. This could lead to significant data loss or service disruption, making it critical for organizations using affected versions to prioritize patching. Users of AcyMailing should take immediate action to mitigate this high-severity vulnerability.