https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 04:04:32 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-338360 EUVD-2026-338360 https://cve.radiocsirt.org/vuln/euvd-2026-338360 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47089 <p>An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. LISTRIGHTS os not limited to users with admin access. An authenticated user could call IMAP LISTRIGHTS against any mailbox they could name and learn what principals had what access to it. (This action should have been restricted to users with admin access on the target mailbox.)</p> <p>An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. LISTRIGHTS os not limited to users with admin access. An authenticated user could call IMAP LISTRIGHTS against any mailbox they could name and learn what principals had what access to it. (This action should have been restricted to users with admin access on the target mailbox.)</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-47089 https://cve.radiocsirt.org/vuln/ghsa-fx86-vr4x-grgq <p>An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. LISTRIGHTS os not limited to users with admin access. An authenticated user could call IMAP LISTRIGHTS against any mailbox they could name and learn what principals had what access to it. (This action should have been restricted to users with admin access on the target mailbox.)</p> <p>An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. LISTRIGHTS os not limited to users with admin access. An authenticated user could call IMAP LISTRIGHTS against any mailbox they could name and learn what principals had what access to it. (This action should have been restricted to users with admin access on the target mailbox.)</p> https://cve.radiocsirt.org/vuln/ghsa-fx86-vr4x-grgq https://cve.radiocsirt.org/vuln/opensuse-su-2026:21368-1 <p>Security update for cyrus-imapd</p> <p>Security update for cyrus-imapd</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:21368-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-47089 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: cyrus-imapd, Ubuntu:Pro:20.04:LTS: cyrus-imapd, Ubuntu:Pro:22.04:LTS: cyrus-imapd, Ubuntu:Pro:24.04:LTS: cyrus-imapd, Ubuntu:26.04:LTS: cyrus-imapd</p> <p>An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. LISTRIGHTS os not limited to users with admin access. An authenticated user could call IMAP LISTRIGHTS against any mailbox they could name and learn what principals had what access to it. (This action should have been restricted to users with admin access on the target mailbox.)</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: cyrus-imapd, Ubuntu:Pro:20.04:LTS: cyrus-imapd, Ubuntu:Pro:22.04:LTS: cyrus-imapd, Ubuntu:Pro:24.04:LTS: cyrus-imapd, Ubuntu:26.04:LTS: cyrus-imapd</p> <p>An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. LISTRIGHTS os not limited to users with admin access. An authenticated user could call IMAP LISTRIGHTS against any mailbox they could name and learn what principals had what access to it. (This action should have been restricted to users with admin access on the target mailbox.)</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-47089 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2387 <p>Ein Angreifer kann mehrere Schwachstellen in cyrus imap ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Daten offenzulegen oder zu manipulieren.</p> <p>Ein Angreifer kann mehrere Schwachstellen in cyrus imap ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Daten offenzulegen oder zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2387