https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:11:00.014293+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-367949 EUVD-2026-367949 2026-10-04T01:11:00.109770+00:00 EUVD-2026-367949 https://cve.radiocsirt.org/vuln/fkie_cve-2026-61907 fkie_cve-2026-61907 2026-10-04T01:11:00.109807+00:00

An issue was discovered in Cyrus IMAP before 3.12.4. JMAP snooze bypasses the destination-mailbox ACL. An authenticated user with insert permissions on another user's snoozed mailbox could cause insertion of mail to that user's inbox, or any other of their mailboxes whose id was known to the user, despite having no insert permissions to the target mailbox.

 https://cve.radiocsirt.org/vuln/ghsa-245j-3rxm-cqmg GHSA-245j-3rxm-cqmg 2026-10-04T01:11:00.109842+00:00

An issue was discovered in Cyrus IMAP before 3.12.4. JMAP snooze bypasses the destination-mailbox ACL. An authenticated user with insert permissions on another user's snoozed mailbox could cause insertion of mail to that user's inbox, or any other of their mailboxes whose id was known to the user, despite having no insert permissions to the target mailbox.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:21929-1 openSUSE-SU-2026:21929-1 — Security update for cyrus-imapd 2026-10-04T01:11:00.109860+00:00

Security update for cyrus-imapd

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-61907 UBUNTU-CVE-2026-61907 2026-10-04T01:11:00.109883+00:00

Affected: Ubuntu:Pro:18.04:LTS: cyrus-imapd, Ubuntu:Pro:20.04:LTS: cyrus-imapd, Ubuntu:Pro:22.04:LTS: cyrus-imapd, Ubuntu:Pro:24.04:LTS: cyrus-imapd, Ubuntu:26.04:LTS: cyrus-imapd

An issue was discovered in Cyrus IMAP before 3.12.4. JMAP snooze bypasses the destination-mailbox ACL. An authenticated user with insert permissions on another user's snoozed mailbox could cause insertion of mail to that user's inbox, or any other of their mailboxes whose id was known to the user, despite having no insert permissions to the target mailbox.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3301 WID-SEC-W-2026-3301 — cyrus imap: Mehrere Schwachstellen 2026-10-04T01:11:00.109912+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in cyrus imap ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand herbeizuführen.