https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T08:39:01.166647+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-61907 fkie_cve-2026-61907 2026-10-05T08:39:01.170377+00:00

An issue was discovered in Cyrus IMAP before 3.12.4. JMAP snooze bypasses the destination-mailbox ACL. An authenticated user with insert permissions on another user's snoozed mailbox could cause insertion of mail to that user's inbox, or any other of their mailboxes whose id was known to the user, despite having no insert permissions to the target mailbox.

 https://vulnerability.circl.lu/vuln/ghsa-245j-3rxm-cqmg GHSA-245j-3rxm-cqmg 2026-10-05T08:39:01.170444+00:00

An issue was discovered in Cyrus IMAP before 3.12.4. JMAP snooze bypasses the destination-mailbox ACL. An authenticated user with insert permissions on another user's snoozed mailbox could cause insertion of mail to that user's inbox, or any other of their mailboxes whose id was known to the user, despite having no insert permissions to the target mailbox.

 https://vulnerability.circl.lu/vuln/opensuse-su-2026:21929-1 openSUSE-SU-2026:21929-1 — Security update for cyrus-imapd 2026-10-05T08:39:01.170467+00:00

Security update for cyrus-imapd

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-61907 UBUNTU-CVE-2026-61907 2026-10-05T08:39:01.170489+00:00

Affected: Ubuntu:Pro:18.04:LTS: cyrus-imapd, Ubuntu:Pro:20.04:LTS: cyrus-imapd, Ubuntu:Pro:22.04:LTS: cyrus-imapd, Ubuntu:Pro:24.04:LTS: cyrus-imapd, Ubuntu:26.04:LTS: cyrus-imapd

An issue was discovered in Cyrus IMAP before 3.12.4. JMAP snooze bypasses the destination-mailbox ACL. An authenticated user with insert permissions on another user's snoozed mailbox could cause insertion of mail to that user's inbox, or any other of their mailboxes whose id was known to the user, despite having no insert permissions to the target mailbox.