CVE-2026-14920

HIGH

AcyMailing < 10.11.1 - Unauthenticated SQL Injection via subscription[] Parameter

Title source: cna
STIX 2.1

Description

## Summary

References (1)

Core 1
Core References
Exploit exploit vdb-entry technical-description
https://wpscan.com/vulnerability/66e61aa1-4e2e-4fe7-b92b-a0d11e4b596f/

Scores

CVSS v3 8.2
EPSS 0.0027
EPSS Percentile 19.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-89
Status published
Products (1)
None/AcyMailing < 10.11.1
Published Aug 02, 2026
Tracked Since Aug 02, 2026