CVE-2026-66358

MediumCVSS 6.1

Published: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

7th percentile - higher than 7% of all known CVEs

A cross-site scripting (XSS) vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script in the victim's browser.

An attacker could steal credentials, hijack user sessions, or spread malicious content within the application context, threatening user security.

Update acmailer to the latest patched version and implement input/output filtering and encoding mechanisms.

Original NVD description (English source)

A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script.