{"id":"CVE-2026-94132","aliases":[],"cve":{"records":[{"id":"CVE-2026-94132","source":"Joomla","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-20T18:03:41.238Z","published":"2026-09-26T14:09:58.250Z","modified":"2026-11-12T17:59:08.745Z"}],"publishers":[{"name":"Joomla","role":"CNA","organizationId":"6ff30186-7fb7-4ad9-be33-533e7b05e586","modified":"2026-11-12T17:59:08.745Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-09-26T22:58:17.548Z"}],"references":[{"url":"https://www.acymailing.com/","tags":["product"],"source":"Joomla"}],"weaknesses":[{"id":"CWE-434","description":"CWE-434 Unrestricted Upload of File with Dangerous Type","source":"Joomla"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-09-26T22:58:09.127032Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0","titleSource":"Joomla","descriptionSource":"Joomla","description":"Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - MIME parts of incoming emails were saved to media/com_acym/upload/ with no extension check, so anyone who could email the monitored mailbox could write a PHP file into the web root.","score":9.5,"severity":"critical","published":"2026-09-26T14:09:58.250Z","modified":"2026-11-12T17:59:08.745Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Datasolution","name":"AcyMailing Enterprise extension for Joomla","platforms":[],"versions":[{"version":"6.0.0-11.0.5","status":"affected"}],"defaultStatus":"unaffected","cpes":[],"source":"Joomla","url":"https://www.cve.org/CVERecord?id=CVE-2026-94132"}],"remediation":[],"references":["https://www.acymailing.com/"],"sources":[{"name":"CVE","id":"CVE-2026-94132","modified":"2026-11-12T17:59:08.745Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-94132"}],"assessments":[{"source":"Joomla","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","score":9.5}],"sourceAffected":[],"observedAt":"2026-11-12T18:51:30.819Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T03:00:33.317Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-12T19:10:33.391Z","attemptedAt":"2026-11-12T19:10:33.391Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-12T19:10:33.586Z","attemptedAt":"2026-11-12T19:10:33.586Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-12T19:10:32.840Z","attemptedAt":"2026-11-12T19:10:32.840Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-12T19:10:31.128Z","attemptedAt":"2026-11-12T19:10:31.128Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2026-94132","url":"https://www.first.org/epss/","probability":0.0047,"percentile":0.4119,"date":"2026-11-12","checkedAt":"2026-11-12T19:10:31.128Z"},{"source":"ENISA EUVD","id":"EUVD-2026-87772","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87772","modified":"Nov 12, 2026, 5:59:08 PM","score":9.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","checkedAt":"2026-11-12T19:10:32.840Z"},{"source":"NVD","id":"CVE-2026-94132","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94132","modified":"2026-11-12T18:17:55.617","score":9.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","checkedAt":"2026-11-12T19:10:33.391Z"},{"source":"NVD","id":"CVE-2026-94132","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94132","modified":"2026-11-12T18:17:55.617","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","checkedAt":"2026-11-12T19:10:33.391Z"},{"source":"GitHub Advisory Database","id":"GHSA-x2ch-94w5-cr2g","url":"https://github.com/advisories/GHSA-x2ch-94w5-cr2g","modified":"2026-10-20T21:30:37Z","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","checkedAt":"2026-11-12T19:10:33.586Z"}],"aiSummary":{"text":"AcyMailing Enterprise extension for Joomla versions 6.0.0-11.0.5 has a vulnerability in the mailbox action feature, allowing attackers with access to the monitored mailbox to upload files without extension checks. This weakness may lead to security issues. The exact impact is uncertain.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-12T18:56:04.125Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-94132"}]}}