What is CVE-2021-46686?

CVE-2021-46686 is a critical-severity vulnerability in Extra Innovation Inc. Acmailer Cgi, classified under OS Command Injection. CVSS score: 9.8/10. Published 2025-02-18.

How severe is CVE-2021-46686?

Critical severity. CVSS v3 base score is 9.8 out of 10.

RCE in Extra Innovation Inc. Acmailer Cgi

CVE-2021-46686

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in acmailer CGI ver.4.0.3 and earlier and acmailer DB ver.1.1.5 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.014 (69.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Extra Innovation Inc. Acmailer Cgi — versions ver.4.0.3 and earlier
Extra Innovation Inc. Acmailer Db — versions ver.1.1.5 and earlier

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

Frequently asked questions

What is CVE-2021-46686?: CVE-2021-46686 is a critical-severity vulnerability in Extra Innovation Inc. Acmailer Cgi, classified under OS Command Injection. CVSS score: 9.8/10. Published 2025-02-18.
How severe is CVE-2021-46686?: Critical severity. CVSS v3 base score is 9.8 out of 10.