Known Vulnerabilities for Cyrus IMAP by Cyrusimap
Listed below are 1 of the newest known vulnerabilities associated with "Cyrus IMAP" by "Cyrusimap".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-47089 json | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. LISTRIGHTS os not limited to users with admin access. An... | Not Provided | 2026-07-16 | 2026-07-16 |
| CVE-2026-47088 json | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in nested MIME comment parsing. A... | Not Provided | 2026-07-16 | 2026-07-16 |
| CVE-2026-47087 json | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH does not honor revoked authorizer access. A URLA... | Not Provided | 2026-07-16 | 2026-07-16 |
| CVE-2026-47086 json | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. GENURLAUTH-issued tokens can bypass ACLs. Any authentica... | Not Provided | 2026-07-16 | 2026-07-16 |
| CVE-2026-47085 json | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH token forgery can occur via a missing mboxkey. I... | Not Provided | 2026-07-16 | 2026-07-16 |
| CVE-2026-47084 json | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The LOCALDELETE command bypassed ACL checks. An authenti... | Not Provided | 2026-07-16 | 2026-07-16 |
| CVE-2026-47083 json | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an ESEARCH cross-user content oracle. By using ... | Not Provided | 2026-07-16 | 2026-07-16 |
| CVE-2026-47082 json | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The vacation "fcc" feature skips the destination-mailbox... | Not Provided | 2026-07-16 | 2026-07-16 |
| CVE-2026-47081 json | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an XAPPLEPUSHSERVICE folder existence oracle an... | Not Provided | 2026-07-16 | 2026-07-16 |
| CVE-2017-12843 json | Cyrus IMAP before 3.0.3 allows remote authenticated users to write to arbitrary files via a crafted (1) SYNCAPPLY, (2) SYNCGE... | 6.5 - MEDIUM | 2017-08-22 | 2023-11-07 |