Known Vulnerabilities for Cyrus Imap by Cyrusimap
Listed below are 1 of the newest known vulnerabilities associated with "Cyrus Imap" by "Cyrusimap".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-61915 json | An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated calendar user co... | Not Provided | 2026-09-09 | 2026-09-10 |
| CVE-2026-61911 json | An issue was discovered in Cyrus IMAP before 3.12.4. There is a Sieve mailbox existence oracle. An authenticated user could i... | Not Provided | 2026-09-09 | 2026-09-10 |
| CVE-2026-61910 json | An issue was discovered in Cyrus IMAP before 3.12.4. Mailbox/set let a sharee change a special-use role on shared mailboxes. ... | Not Provided | 2026-09-09 | 2026-09-14 |
| CVE-2026-61909 json | An issue was discovered in Cyrus IMAP before 3.12.4. CalDAV/CardDAV multiget bypasses a per-href ACL. An authenticated DAV us... | Not Provided | 2026-09-09 | 2026-09-14 |
| CVE-2026-61908 json | An issue was discovered in Cyrus IMAP before 3.12.4. A JMAP email-header blob ID can reference an out-of-bounds index. An aut... | Not Provided | 2026-09-09 | 2026-09-10 |
| CVE-2026-61907 json | An issue was discovered in Cyrus IMAP before 3.12.4. JMAP snooze bypasses the destination-mailbox ACL. An authenticated user ... | Not Provided | 2026-09-09 | 2026-09-14 |
| CVE-2017-12843 json | Cyrus IMAP before 3.0.3 allows remote authenticated users to write to arbitrary files via a crafted (1) SYNCAPPLY, (2) SYNCGE... | 6.5 - MEDIUM | 2017-08-22 | 2023-11-07 |