CVE Catalog
CVE-2026-66358
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk0.17%
6th percentile - higher than 6% of all known CVEs
Summary
A cross-site scripting (XSS) vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script in the victim's browser.
Risk Assessment
An attacker could steal credentials, hijack user sessions, or spread malicious content within the application context, threatening user security.
Recommendation
Update acmailer to the latest patched version and implement input/output filtering and encoding mechanisms.
Other vulnerabilities in acmailer
Original NVD description (English source)
A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS