CVE-2026-39498

HighCVSS 7.2

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 16/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

28th percentile - higher than 28% of all known CVEs

There is a PHP Object Injection vulnerability in the shop manager in YayMail versions <= 4.3.3.

An attacker could exploit this vulnerability to execute unauthorized code, potentially leading to serious security breaches.

It is recommended to update to the latest version of YayMail to mitigate this vulnerability.

Original NVD description (English source)

Shop manager PHP Object Injection in YayMail <= 4.3.3 versions.