{"affected":[{"defaultStatus":"unaffected","product":"AcyMailing Enterprise extension for Joomla","source":"CNA: Joomla","vendor":"Datasolution","versions":[{"status":"affected","version":"6.0.0-11.0.5"}]}],"cveId":"CVE-2026-94132","cwes":["CWE-434"],"description":"Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - MIME parts of incoming emails were saved to media/com_acym/upload/ with no extension check, so anyone who could email the monitored mailbox could write a PHP file into the web root.","epss":{"date":"2026-11-12","percentile":0.4119,"score":0.0047},"exploits":[],"kev":null,"metrics":[{"score":9.5,"severity":"critical","source":"CNA: Joomla","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","version":"4.0"}],"modifiedAt":1794506348745,"publishedAt":1790431798250,"references":[{"source":"CNA: Joomla","tags":["product"],"url":"https://www.acymailing.com/"}],"remediation":[],"revision":"5fe31210cd9d57731c62e154e55b9e1f6429b393220288dc6b4225b272c8c576","sources":[{"modifiedAt":1794506348745,"name":"CNA: Joomla","retrievedAt":1794507135169,"url":"https://www.cve.org/CVERecord?id=CVE-2026-94132"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794507135671,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-94132"}],"ssvc":{"assessedAt":1790463489127,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0","updatedAt":1794507135671}