4 matches found
CVE-2026-127121
SOGo before 5.12.13 contains an improper cryptographic signature verification vulnerability that allows remote attackers to replace a victim's contact S/MIME certificate by sending a spoofed multipart/signed message with a mismatched signature and an impersonated From address. Attackers can deliv...
EUVD-2026-124529
SOGo before 5.12.13 contains an improper cryptographic signature verification vulnerability that allows remote attackers to replace a victim's contact S/MIME certificate by sending a spoofed multipart/signed message with a mismatched signature and an impersonated From address. Attackers can deliv...
CVE-2026-127121
SOGo versions prior to 5.12.13 are vulnerable to an improper cryptographic signature verification flaw within the UIxMailView component. Remote attackers can exploit this by sending a spoofed multipart/signed message with an impersonated From address and a mismatched signature. By delivering a cr...
CVE-2026-127121 SOGo before 5.12.13 S/MIME Certificate Spoofing via UIxMailView
SOGo before 5.12.13 contains an improper cryptographic signature verification vulnerability that allows remote attackers to replace a victim's contact S/MIME certificate by sending a spoofed multipart/signed message with a mismatched signature and an impersonated From address. Attackers can deliv...