Astra Linux – Vulnerability in Sogo

In versions of SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored, SQL injection can occur. This issue is related to the cpassword = '%@' parameter in the changePasswordForLogin function...

UBUNTU-CVE-2026-46446

SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored, allows SQL injection. This is related to cpassword = '%@' in changePasswordForLogin...

CVE-2026-46446

SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored, allows SQL injection. This is related to cpassword = '%@' in changePasswordForLogin...

CVE-2026-46446: Improper Neutralization of Special Elements used in an SQL Command

SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored, allows SQL injection. This is related to cpassword = '%@' in changePasswordForLogin...