Skip to content
Cyrusimap vulnerabilities
Newest
-
cyrus imap, cyrusimap cyrus imap +1 more
An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An...
CVE-2026-61915
Fix available
4.2 Medium
-
cyrus imap, cyrusimap cyrus imap +1 more
An issue was discovered in Cyrus IMAP before 3.12.4. There is a Sieve mailbox existence oracle....
CVE-2026-61911
Fix available
4.3 Medium
-
cyrus imap, cyrusimap cyrus imap +1 more
An issue was discovered in Cyrus IMAP before 3.12.4. Mailbox/set let a sharee change a special...
CVE-2026-61910
Fix available
3.5 Low
-
cyrus imap, cyrusimap cyrus imap +1 more
An issue was discovered in Cyrus IMAP before 3.12.4. CalDAV/CardDAV multiget bypasses a per-href...
CVE-2026-61909
Fix available
3.5 Low
-
cyrus imap, cyrusimap cyrus imap +1 more
An issue was discovered in Cyrus IMAP before 3.12.4. A JMAP email-header blob ID can reference an...
CVE-2026-61908
Fix available
3.1 Low
-
cyrusimap cyrus imap
An issue was discovered in Cyrus IMAP before 3.12.4. JMAP snooze bypasses the destination-mailbox...
CVE-2026-61907
Fix available
4.3 Medium
-
cyrusimap cyrus imap
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. LISTRIGHTS os not limited to...
CVE-2026-47089
Fix available
4.3 Medium
-
cyrusimap cyrus imap
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in...
CVE-2026-47088
Fix available
3.1 Low
-
cyrusimap cyrus imap
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH does not honor...
CVE-2026-47087
Fix available
3.5 Low
-
cyrusimap cyrus imap
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. GENURLAUTH-issued tokens can...
CVE-2026-47086
Fix available
3.5 Low
-
cyrusimap cyrus imap
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH token forgery can...
CVE-2026-47085
Fix available
4.0 Medium
-
cyrusimap cyrus imap
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The LOCALDELETE command...
CVE-2026-47084
Fix available
6.5 Medium
-
cyrusimap cyrus imap
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an ESEARCH cross...
CVE-2026-47083
Fix available
4.3 Medium
-
cyrusimap cyrus imap
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The vacation "fcc" feature...
CVE-2026-47082
Fix available
5.4 Medium
-
cyrusimap cyrus imap
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an...
CVE-2026-47081
Fix available
3.1 Low
-
cyrusimap cyrus imap
Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause...
CVE-2024-34055
Fix available
6.5 Medium
-
cyrusimap cyrus-sasl, debian linux, fedoraproject fedora +8 more +10 more
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for...
CVE-2022-24407
Fix available
8.8 High
-
cyrusimap cyrus-sasl, apache bookkeeper, apple ipados +19 more +21 more
cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote...
CVE-2019-19906
Fix available
7.5 High
-
cyrusimap cyrus imap, fedoraproject fedora +1 more
Cyrus IMAP before 3.0.3 allows remote authenticated users to write to arbitrary files via a...
CVE-2017-12843
6.5 Medium
-
cyrusimap cyrus sasl, apple mac os x, mac os x server +2 more
Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause...
CVE-2002-1347
Fix available
9.8 Critical