CVE-2026-47081

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an XAPPLEPUSHSERVICE folder existence oracle and push hijack. An authenticated IMAP user could probe for the existence of arbitrary mailboxes on other users' accounts via the XAPPLEPUSHSERVICE command and then create...

The vulnerability of the multimedia player iTunes, which allows a tracker to monitor users

The vulnerability of the APNs Server component in the iTunes multimedia player relates to the use of open-text client certificates and their transmission to the vulnerable component. Exploiting this vulnerability allows a malicious actor to track users by correlating them with the certificates...