Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-70408

An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileges.

Description

An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Extra Innovation Inc. acmailer CGI

Default version status: unaffected

  • 0 to < 4.1.2affected

Extra Innovation Inc. acmailer DB

Default version status: unaffected

  • 0 to < 1.2.2affected

References