Extra Innovation Inc. vulnerabilities
Published CVEs affecting Extra Innovation Inc. products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-70408
High · 8.8
CWE-863 Aug 19, 2026
Incorrect Authorization in Extra Innovation Inc. acmailer CGI
An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileges.
CVE-2026-66358
Medium · 6.1
CWE-79 Aug 19, 2026
Cross-site Scripting (XSS) in Extra Innovation Inc. acmailer CGI
A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script.