cyrus_imap vulnerabilities

CVEs whose affected-version data names the cyrus_imap package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-61907Medium· 4.3

2w ago

An issue was discovered in Cyrus IMAP before 3.12.4

An issue was discovered in Cyrus IMAP before 3.12.4. JMAP snooze bypasses the destination-mailbox ACL. An authenticated user with insert permissions on another user's snoozed mailbox could cause insertion of mail to that user's inbox, or…

▾ Sunlitcyrusimap · Cyrus IMAPEPSS 0.35%via NVD