https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T04:49:54.185117+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-325654 EUVD-2026-325654 2026-10-06T04:49:54.203091+00:00 EUVD-2026-325654 https://cve.radiocsirt.org/vuln/fkie_cve-2020-37248 fkie_cve-2020-37248 2026-10-06T04:49:54.203129+00:00

OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS/man-in-the-middle attacks, taking over the connection and extracting account credentials in cleartext.

 https://cve.radiocsirt.org/vuln/ghsa-899r-9fxv-q4xm GHSA-899r-9fxv-q4xm 2026-10-06T04:49:54.203171+00:00

OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS/man-in-the-middle attacks, taking over the connection and extracting account credentials in cleartext.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-37248 UBUNTU-CVE-2020-37248 2026-10-06T04:49:54.203199+00:00

Affected: Ubuntu:22.04:LTS: offlineimap3, Ubuntu:24.04:LTS: offlineimap3, Ubuntu:25.10: offlineimap3, Ubuntu:26.04:LTS: offlineimap3

OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS/man-in-the-middle attacks, taking over the connection and extracting account credentials in cleartext.