CVE Catalog

CVE-2026-66689

MediumCVSS 6.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.19%

9th percentile - higher than 9% of all known CVEs

Summary

Unauthenticated Broken Access Control vulnerability in Anti Spam and list cleaner – AcyChecker plugin versions up to and including 2.0.0.

Risk Assessment

An unauthenticated attacker may gain unauthorized access to functionality, potentially leading to data breaches or unauthorized changes.

Recommendation

Update the AcyChecker plugin to a version newer than 2.0.0.

Original NVD description (English source)

Unauthenticated Broken Access Control in Anti Spam and list cleaner &#8211; AcyChecker <= 2.0.0 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS