Vulnerability Bulletins

CVE-2026-120468

   
Affected software JOOMLA
 
Joomla Extension - acymailing.com - Unauthenticated disclosure of mailing list metadata in AcyMailing 1.0.0 - 11.1.1 - An unauthenticated attacker can retrieve every mailing list of the site, including lists that are not publicly visible and lists restricted to an access level, together with their descriptions, access levels, owning user account and subscriber counts. The WordPress plugin is not affected.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-120468