CVE-2021-46686

9.8 criticalEPSS 1.4%

Critical (9.8). EPSS 1.4% chance of exploitation in the next 30 days.

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in acmailer CGI ver.4.0.3 and earlier and acmailer DB ver.1.1.5 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2025-02-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://acmailer.jp/info/de.cgi?id=103
https://jvn.jp/en/jp/JVN96957439/
https://www.acmailer.jp/info/de.cgi?id=102

Check your stack JSON