CVE-2026-70408

HighCVSS 8.8

Published: 19/08/2026(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

26th percentile - higher than 26% of all known CVEs

An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileges.

An unauthorized user could gain full control over the system, potentially leading to data confidentiality, integrity, and availability breaches.

Update acmailer to the latest version that includes the fix and review existing user accounts.

Original NVD description (English source)

An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileges.