PT-2026-48586

Name of the Vulnerable Software and Affected Versions SOGo versions prior to 5.12.7 Description An issue exists in the contact search component where the software fails to properly protect the SQL query structure. This allows authenticated users to execute arbitrary SQL statements through the...

CVE-2026-33550

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length only 12 digits instead of the 20 recommended...

CVE-2026-33550

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length only 12 digits instead of the 20 recommended...

CVE-2025-71276

SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories...

CVE-2025-71276

SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories...

CVE-2025-71276

SOGo prior to 5.12.5 is described as having an XSS vulnerability affecting events, tasks, and contacts categories. The connected sources confirm the affected software version range and the vulnerability class (XSS), but do not provide exploit details, impact scope beyond the component areas, or r...

Linux Distros Unpatched Vulnerability : CVE-2026-33550

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length only 12 digits instead of the 20 recommended. CVE-2026-33550...

Linux Distros Unpatched Vulnerability : CVE-2025-71276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories. CVE-2025-71276 Note that Nessus relies on the presence of the...

PT-2026-21653

Name of the Vulnerable Software and Affected Versions Alinto SOGo versions 5.12.3 through 5.12.4 Description A flaw exists in Alinto SOGo that allows for cross site scripting. The issue stems from manipulating the hint argument within an unknown function. This can be triggered remotely. The explo...

SOGo <= 5.12.4 XSS Vulnerability

SOGo is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:alinto:sogo"; if...

Debian dla-4386 : sogo - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4386 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4386-1 [email protected] https://www.debian.org/lts/security/...

CVE-2025-63498

alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting XSS via the "userName" parameter...

CVE-2025-63498

alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting XSS via the "userName" parameter...

EUVD-2016-7123

Malware in sbrugna...

EUVD-2015-5351

Malware in sbrugna...

EUVD-2021-19769

Malware in sbrugna...

EUVD-2016-7122

Malware in sbrugna...

EUVD-2025-20097

Malicious code in bioql PyPI...

EUVD-2022-51891

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2015-5395

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site request forgery CSRF vulnerability in SOGo before 3.1.0. CVE-2015-5395 Note that Nessus relies on the presence of the package as reported by the...