CVE-2026-97074

Subscriber Insecure Direct Object References (IDOR) in Newsletters, Email Marketing, SMS and Popups by Omnisend <= 1.9.0 versions.

Published Sep 30, 2026
CVSS 4.3 medium
0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

Omnisend Newsletters Email Marketing SMS and Popups by Omnisend

CVE-2026-97074 at the National Vulnerability Database