What is CVE-2016-1142?

CVE-2016-1142 is a critical-severity vulnerability in Seeds Acmailer, classified under OS Command Injection. CVSS score: 9.1/10. Published 2016-01-16.

How severe is CVE-2016-1142?

Critical severity. CVSS v3 base score is 9.1 out of 10.

RCE in Seeds Acmailer

CVE-2016-1142

Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified vectors.

Vulnerability class: Command Injection (OS Command Injection)

Published 2016-01-16 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.024 (83.5th percentile), scored 2026-09-29.

Low probability of exploitation in the next 30 days, but still tracked. 83rd percentile — 83.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.024 · newest: 0.024 · change: 0.000

Affected products

Seeds Acmailer — versions 3.9.0, 3.9.1, 3.9.2

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

www.acmailer.jp/info/de.cgi (Vendor Advisory)
jvndb.jvn.jp/jvndb/JVNDB-2016-000002 (Vendor Advisory, third-party-advisory)
jvn.jp/en/jp/JVN50899877/index.html (Vendor Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2016-1142?: CVE-2016-1142 is a critical-severity vulnerability in Seeds Acmailer, classified under OS Command Injection. CVSS score: 9.1/10. Published 2016-01-16.
How severe is CVE-2016-1142?: Critical severity. CVSS v3 base score is 9.1 out of 10.