CVE-2026-56292

Joomla Extension - acymailing.com - SQL Injection in AcyMailing extension < 10.11.1 - A SQLi vulnerability in AcyMailing component < 10.11.1 for Joomla was discovered. Exploiting this flaw can lead to unauthorized database access and data leakage.

Affected products

Acymailing

Acymailing

< 10.11.1

Fix

Available

CVSS 4.0

9.2 CRITICAL

CVSS 3.1

7.5 HIGH

EPSS

0.3% (24th percentile)

Weakness

CWE-89

NVD status

Modified

Published

2026-07-09

Attack patterns

CAPEC-66

Entry point

columns query param

Path

index.php?option=com_acym&ctrl=frontentityselect&task=loadEntityFront