Medium severityNVD Advisory· Published Nov 12, 2026· Updated Nov 12, 2026
CVE-2026-120468
CVE-2026-120468
Description
Joomla Extension - acymailing.com - Unauthenticated disclosure of mailing list metadata in AcyMailing 1.0.0 - 11.1.1 - An unauthenticated attacker can retrieve every mailing list of the site, including lists that are not publicly visible and lists restricted to an access level, together with their descriptions, access levels, owning user account and subscriber counts. The WordPress plugin is not affected.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 1.0.0 - 11.1.1
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.