Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Extra Innovation Inc. Clear all filters
TI-2026-49188 CVE-2026-70408 · GHSA-w4h6-h99g-8xhr

Incorrect authorization in Extra Innovation Inc. acmailer CGI

Priority MEDIUM 40

An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileges.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00445 Published 2026-08-19 Fixed in 4.1.2, 1.2.2 CWE-863
TI-2021-21449 CVE-2021-46686 · GHSA-5mr4-h7fw-j3h9

OS command injection in Extra Innovation Inc. acmailer CGI

Priority MEDIUM 52

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in acmailer CGI ver.4.0.3 and earlier and acmailer DB ver.1.1.5 and earlier.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01424 Published 2025-02-17 No fix listed CWE-78