High severity7.5NVD Advisory· Published Jul 9, 2026· Updated Jul 23, 2026
CVE-2026-56292
CVE-2026-56292
Description
Joomla Extension - acymailing.com - SQL Injection in AcyMailing extension < 10.11.1 - A SQLi vulnerability in AcyMailing component < 10.11.1 for Joomla was discovered. Exploiting this flaw can lead to unauthorized database access and data leakage.
Affected products
2cpe:2.3:a:acymailing:acymailing:*:*:*:*:*:joomla\!:*:*+ 1 more
- cpe:2.3:a:acymailing:acymailing:*:*:*:*:*:joomla\!:*:*range: >=6.0.0,<10.11.1
- (no CPE)range: <10.11.1
Patches
Vulnerability mechanics
References
2- mysites.guru/blog/acymailing-sql-injection-disclosure/nvdExploitThird Party Advisory
- www.acymailing.comnvdProduct
News mentions
0No linked articles in our index yet.