CVE-2026-56292criticalCWE-89

CVE-2026-56292: critical vulnerability in acymailing.com AcyMailing extension for Joomla

Joomla Extension - acymailing.com - SQL Injection in AcyMailing extension < 10.11.1

Published · Updated

Follow this CVE+ Monitor acymailing.com AcyMailing extension for Joomla

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendcvss 9.2epss 1.4%
from disclosure to weapon35 days
Published on NVDJul 9
1st PoC+35d
Joomla Extension - acymailing.com - SQL Injection in AcyMailing extension < 10.11.1 - A SQLi vulnerability in AcyMailing component < 10.11.1 for Joomla was discovered. Exploiting this flaw can lead to unauthorized database access and data leakage.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:L/SC:H/SI:H/SA:H
Affected products
acymailing.com · acymailing.com AcyMailing extension for Joomla
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.