cyrus-imapd vulnerabilities
3 known CVE vulnerabilities in cyrus-imapd, translated and rated.
- CVE-2026-47085Medium
An issue in cyrus-imapd up to version 3.12.2 allows URLAUTH token forgery. An attacker who knows a victim's folder name for which no auth URL was ever issued can compute a valid HMAC-SHA1 token with a predictable key, gaining read access to the mailbox.
- CVE-2026-47083Medium
An issue was discovered in cyrus-imapd up to version 3.12.2 in the ESEARCH command. An authenticated IMAP user can enumerate folder names in any account they can name, leading to information disclosure about the mailbox structure.
- CVE-2026-47081Low
In cyrus-imapd up to version 3.12.2, a vulnerability was found in the XAPPLEPUSHSERVICE command. An authenticated IMAP user can probe for the existence of arbitrary mailboxes on other users' accounts and hijack push notifications for new mail in those mailboxes to their own APNS device.