https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T05:26:13.027606+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-338343 EUVD-2026-338343 2026-10-04T05:26:13.056185+00:00 EUVD-2026-338343 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47081 fkie_cve-2026-47081 2026-10-04T05:26:13.056230+00:00

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an XAPPLEPUSHSERVICE folder existence oracle and push hijack. An authenticated IMAP user could probe for the existence of arbitrary mailboxes on other users' accounts via the XAPPLEPUSHSERVICE command and then create Apple Push Notification Service notifications for new mail in those mailboxes to their own APNS device. This did not leak any data about the content of mailboxes. Instead, a "mailbox has changed" notice would be pushed when the mailbox modseq changed.

 https://cve.radiocsirt.org/vuln/ghsa-w8cp-9j4g-wc9p GHSA-w8cp-9j4g-wc9p 2026-10-04T05:26:13.056274+00:00

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an XAPPLEPUSHSERVICE folder existence oracle and push hijack. An authenticated IMAP user could probe for the existence of arbitrary mailboxes on other users' accounts via the XAPPLEPUSHSERVICE command and then create Apple Push Notification Service notifications for new mail in those mailboxes to their own APNS device. This did not leak any data about the content of mailboxes. Instead, a "mailbox has changed" notice would be pushed when the mailbox modseq changed.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:21368-1 openSUSE-SU-2026:21368-1 — Security update for cyrus-imapd 2026-10-04T05:26:13.056321+00:00

Security update for cyrus-imapd

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-47081 UBUNTU-CVE-2026-47081 2026-10-04T05:26:13.056365+00:00

Affected: Ubuntu:Pro:18.04:LTS: cyrus-imapd, Ubuntu:Pro:20.04:LTS: cyrus-imapd, Ubuntu:Pro:22.04:LTS: cyrus-imapd, Ubuntu:Pro:24.04:LTS: cyrus-imapd, Ubuntu:26.04:LTS: cyrus-imapd

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an XAPPLEPUSHSERVICE folder existence oracle and push hijack. An authenticated IMAP user could probe for the existence of arbitrary mailboxes on other users' accounts via the XAPPLEPUSHSERVICE command and then create Apple Push Notification Service notifications for new mail in those mailboxes to their own APNS device. This did not leak any data about the content of mailboxes. Instead, a "mailbox has changed" notice would be pushed when the mailbox modseq changed.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2387 WID-SEC-W-2026-2387 — cyrus imap: Mehrere Schwachstellen 2026-10-04T05:26:13.056401+00:00

Ein Angreifer kann mehrere Schwachstellen in cyrus imap ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Daten offenzulegen oder zu manipulieren.