CVE-2021-46686: Extra Innovation Inc Acmailer Cgi

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in acmailer CGI ver.4.0.3 and earlier and acmailer DB ver.1.1.5 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker.

Affected products

• Extra Innovation Inc Acmailer Cgi: up to and including 4.0.3
• Extra Innovation Inc Acmailer DB: up to and including 1.1.5

Published 2025-02-18. Last modified 2026-06-17.