Is CVE-2026-94389 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-94389?

CVE-2026-94389 has a CVSS v3 severity of CRITICAL (9).

Back

Description

Unauthenticated Remote Code Execution (RCE) in AcyMailing SMTP Newsletter <= 11.0.5 versions.