CVE-2026-97074: Omnisend Newsletters, Email Marketing, Sms And Popups By Omnisend

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Subscriber Insecure Direct Object References (IDOR) in Newsletters, Email Marketing, SMS and Popups by Omnisend <= 1.9.0 versions.

Affected products

• Omnisend Newsletters, Email Marketing, Sms And Popups By Omnisend: up to and including 1.9.0

Published 2026-09-30. Last modified 2026-09-30.