PatchSiren

Yeeaddons CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Yeeaddons CVE published 2026-06-15

CVE-2026-39498

CVE-2026-39498 is a PHP Object Injection vulnerability in YayMail versions up to 4.3.3. The vulnerability has a CVSS score of 7.2 and is considered HIGH severity. It was published on June 15, 2026, and last modified on October 25, 2026.