CVE-2026-86497: Insertion of Sensitive Information Into Sent Data

In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication allowed a project administrator to exfiltrate stored mailbox credentials...

PT-2026-86869

In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication allowed a project administrator to exfiltrate stored mailbox credentials...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053261)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053261 advisory. In the Linux kernel, the following vulnerability has been resolved: mailbox: Prevent out-of-bounds access in fwmboxindexxlate Although it is guided that mbox-cells...

CVE-2026-80822

In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devmkasprintf Add a check to see if devmkasprintf is not NULL in mchpipcgetclusteraggrirq, returning -ENOMEM if the function failed...

AZL-99686 CVE-2026-80822 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devmkasprintf Add a check to see if devmkasprintf is not NULL in mchpipcgetclusteraggrirq, returning -ENOMEM if the function failed...

CVE-2026-80822 mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf()

In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devmkasprintf Add a check to see if devmkasprintf is not NULL in mchpipcgetclusteraggrirq, returning -ENOMEM if the function failed...

CVE-2026-80822

CVE-2026-80822 affects the Linux kernel's mchp-ipc-sbi mailbox driver. The root cause is a missing null check on the return value of devm_kasprintf() in the function mchp_ipc_get_cluster_aggr_irq() . Without this check, a failed allocation could lead to a NULL pointer dereference. The fix adds a ...

EUVD-2026-71264

In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devmkasprintf Add a check to see if devmkasprintf is not NULL in mchpipcgetclusteraggrirq, returning -ENOMEM if the function failed...

CVE-2026-80822 mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf()

In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devmkasprintf Add a check to see if devmkasprintf is not NULL in mchpipcgetclusteraggrirq, returning -ENOMEM if the function failed...

CVE-2026-80822

In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devmkasprintf Add a check to see if devmkasprintf is not NULL in mchpipcgetclusteraggrirq, returning -ENOMEM if the function failed...

The vulnerability of the mbox_controller_register() function in the drivers/mailbox/mailbox.c file of the Linux kernel-based mailbox driver module allows a hacker to cause a service failure.

The vulnerability of the mboxcontrollerregister function in the drivers/mailbox/mailbox.c file of the Linux kernel-based mailbox driver module is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-85687

In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devm kasprintf Add a check to see if devm kasprintf is not NULL in mchp ipc get cluster aggr irq, returning -ENOMEM if the function failed...

PT-2026-91369

In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devm kasprintf Add a check to see if devm kasprintf is not NULL in mchp ipc get cluster aggr irq, returning -ENOMEM if the function failed...

The vulnerability of the mbox_test_probe() function in the drivers/mailbox/mailbox-test.c file of the Linux kernel’s mailbox driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mboxtestprobe function in the drivers/mailbox/mailbox-test.c file of the Linux kernel’s mailbox driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

PT-2026-84647

TRC analysis shows attackers exploiting CVE-2024-26225 authentication bypass on 22,000 unpatched Exchange servers to hijack all user mailboxes. Post-compromise lateral movement through stolen email credentials enables widespread organizational infiltration. Runtime segmentation helps contain brea...

[SECURITY] [DLA 4766-1] cyrus-imapd security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4766-1 [email protected] https://www.debian.org/lts/security/ Xavier Guimard September 01, 2026 https://wiki.debian.org/LTS -...

CVE-2026-40204

A flaw was found in Dovecot. This vulnerability allows an attacker to bypass Access Control List ACL restrictions through the ldamailboxautocreate feature. This could potentially grant unauthorized access to mailboxes or other restricted resources. Mitigation Mitigation for this issue is either n...

CVE-2026-80657

A flaw was found in the Linux kernel's accel/amdxdna component. The management mailbox channel cleanup helpers, xdnamailboxfreechannel and xdnamailboxstopchannel, could be called from error handling paths when the mgmtchann was already destroyed. This could lead to a NULL pointer dereference,...

CVE-2026-33606

A flaw was found in Dovecot. A malicious user can craft specific mail content that, when an administrator later uses the dsync tool with the stream protocol, is interpreted as dsync commands. This command injection allows the user to modify the state of mailboxes on the destination, including...

Debian dla-4766 : cyrus-admin - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4766 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4766-1 [email protected]...