CVE-2026-94132
— UNSCOREDPublished 2026-09-26 · Updated 2026-09-29
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - MIME parts of incoming emails were saved to media/com_acym/upload/ with no extension check, so anyone who could email the monitored mailbox could write a PHP file into the web root.
Weaknesses
CWE-434
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-100389
- MEDIUMCVE-2026-101071PoC
- MEDIUMCVE-2026-102263
- MEDIUMCVE-2026-102366PoC
- MEDIUMCVE-2026-102842PoC
- HIGHCVE-2026-12264
- HIGHCVE-2026-12269
- HIGHCVE-2026-13248
Related by shared AI tags and CWE weakness class. Browse the full archive.