https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T14:02:06.108843+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-04894 bdu:2021-04894 2026-10-07T14:02:06.112800+00:00 bdu:2021-04894 https://cve.radiocsirt.org/vuln/euvd-2026-28264 EUVD-2026-28264 2026-10-07T14:02:06.112831+00:00 EUVD-2026-28264 https://cve.radiocsirt.org/vuln/fkie_cve-2021-33054 fkie_cve-2021-33054 2026-10-07T14:02:06.112845+00:00

SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receives. Any actor with network access to the deployment could impersonate users when SAML is the authentication method. (Only versions after 2.0.5a are affected.)

 https://cve.radiocsirt.org/vuln/ghsa-5x58-gqg4-wfvq GHSA-5x58-gqg4-wfvq 2026-10-07T14:02:06.112874+00:00

SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receives. Any actor with network access to the deployment could impersonate users when SAML is the authentication method. (Only versions after 2.0.5a are affected.)

 https://cve.radiocsirt.org/vuln/gsd-2021-33054 gsd-2021-33054 2026-10-07T14:02:06.112890+00:00 gsd-2021-33054 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-33054 UBUNTU-CVE-2021-33054 2026-10-07T14:02:06.112900+00:00

Affected: Ubuntu:Pro:16.04:LTS: sogo, Ubuntu:Pro:18.04:LTS: sogo, Ubuntu:Pro:20.04:LTS: sogo

SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receives. Any actor with network access to the deployment could impersonate users when SAML is the authentication method. (Only versions after 2.0.5a are affected.)