VULNERABILITY INTELLIGENCE

CVE-2026-70408

CVSS score8.7 HIGH

EPSS probability0.45%

CISA KEVNot currently listed

Published2026-08-19

Last modified2026-08-28

CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileges.