CVE-2026-66358: Extra Innovation Inc Acmailer Cgi

Medium severity, CVSS 5.1. EPSS: 0.3% chance of exploitation in the next 30 days.

A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script.

Affected products

• Extra Innovation Inc Acmailer Cgi: before 4.1.2 (fixed in 4.1.2)
• Extra Innovation Inc Acmailer DB: before 1.2.2 (fixed in 1.2.2)

Published 2026-08-19. Last modified 2026-08-28.