{"vulnerability": "cve-2026-94132", "sightings": [{"uuid": "18b23257-d702-4cde-a510-23257bded5b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwgo75hmqx2u", "content": "\ud83d\udea8 CVE-2026-94132 \u2014 CVSS 9.5 CRITICAL\n\nJoomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMai...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94132\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T16:08:13.687356Z"}, {"uuid": "4d0ffedc-1a84-427d-ae19-2ecdac1ff4f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hmy5ekysbwems", "content": "CVE-2026-94132 - Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension\nCVE ID : CVE-2026-94132\n \n Published : Sept. 26, 2026, 3:16 p.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : Joomla Extension - acy...", "creation_timestamp": "2026-09-26T16:57:06.482306Z"}, {"uuid": "874c5d82-2182-4c8e-a630-fe2eeb26d13f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "https://t.me/GithubRedTeam/103474", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94132\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 20:41:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAcyMailing Enterprise for Joomla < 11.1.0: POP3 mailbox actions save MIME attachments without extension checks to media/com_acym/upload/, enabling RCE when an attacker can email the monitored inbox (CVE-2026-94132, CVSS 9.5). Python check/exploit PoC \u2014 \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T21:07:06.000000Z"}, {"uuid": "dd88185f-8d86-49c9-94c2-91fff035c1a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103474", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94132\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 20:41:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAcyMailing Enterprise for Joomla < 11.1.0: POP3 mailbox actions save MIME attachments without extension checks to media/com_acym/upload/, enabling RCE when an attacker can email the monitored inbox (CVE-2026-94132, CVSS 9.5). Python check/exploit PoC \u2014 \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T21:07:06.000000Z"}, {"uuid": "edc92413-d393-4cb6-b608-112c986938a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mwifbvxbq52r", "content": "AcyMailing 11.1.0's two quiet security fixes now have CVEs: CVE-2026-94132, a mailbox file write rated 9.5 Critical, and CVE-2026-94131, a file deletion. The changelog still says Bug fixes.\n\nmysites.guru/blog/acymail...", "creation_timestamp": "2026-09-27T08:34:03.608510Z"}, {"uuid": "66086e3e-bea4-4971-b442-6fa9becc8f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwis2l7qq32v", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-94132: Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - \u2026\nCVSS 9.5\nhttps://beta.vulnsea.com/cve/CVE-2026-94132\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-27T12:22:35.012700Z"}]}