CVE

CVE-2021-20617

9.8

CVSS

Description

Improper access control vulnerability in acmailer ver. 4.0.1 and earlier, and acmailer DB ver. 1.1.3 and earlier allows remote attackers to execute an arbitrary OS command, or gain an administrative privilege which may result in obtaining the sensitive information on the server via unspecified vectors.

Attack Vector

Privileges Req.

User Interaction

acmailer and acmailer db

Updated Oct 24, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~10 seconds

CVE-2021-20617 Scanner

CVE-2021-20617 Scanner - OS Command Injection vulnerability in Acmailer

Used 2.7k times · 3.4k assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

CVE history: acmailer and acmailer db

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →