Authorization Flaw in Acmailer Allows Unauthorized Sub-Account Creation by Users
CVE-2026-70408
8.7HIGH
What is CVE-2026-70408?
An authorization flaw in Acmailer permits users to create sub-accounts with administrative permissions without proper validation. This can potentially lead to unauthorized access and control over critical functionalities within the application, posing a significant security risk.
Affected Version(s)
acmailer CGI 0 < 4.1.2
acmailer DB 0 < 1.2.2
References
CVSS V4
Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
CVSS V3.0
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved