CVE-2026-120468
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Nov 12, 2026
Vendor
unknown
Description
Joomla Extension - acymailing.com - Unauthenticated disclosure of mailing list metadata in AcyMailing 1.0.0 - 11.1.1 - An unauthenticated attacker can retrieve every mailing list of the site, including lists that are not publicly visible and lists restricted to an access level, together with their descriptions, access levels, owning user account and subscriber counts. The WordPress plugin is not affected.