EUVD-2026-124529

SOGo before 5.12.13 contains an improper cryptographic signature verification vulnerability that allows remote attackers to replace a victim's contact S/MIME certificate by sending a spoofed multipart/signed message with a mismatched signature and an impersonated From address. Attackers can deliv...

CVE-2026-127121

SOGo versions prior to 5.12.13 are vulnerable to an improper cryptographic signature verification flaw within the UIxMailView component. Remote attackers can exploit this by sending a spoofed multipart/signed message with an impersonated From address and a mismatched signature. By delivering a cr...

CVE-2026-127121 SOGo before 5.12.13 S/MIME Certificate Spoofing via UIxMailView

SOGo before 5.12.13 contains an improper cryptographic signature verification vulnerability that allows remote attackers to replace a victim's contact S/MIME certificate by sending a spoofed multipart/signed message with a mismatched signature and an impersonated From address. Attackers can deliv...

CVE-2026-56727 Zammad: PGP signature spoofing via unvalidated verification return

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary In Zammad's inbound PGP email processing, the return value of the gpg verification call was silently discarded. Regardless of whether gpg reported a valid, invalid, or missing signature, the handler...

PT-2026-98941

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.0.2 Description In the inbound PGP email processing, the return value of the gpg verification call is silently discarded. The handler unconditionally marks the security preferences of the article as having a successf...

Security update for alpine (moderate)

openSUSE Security Update: Security update for alpine Announcement ID: openSUSE-SU-2021:0695-1 Rating: moderate References: 1173281 Cross-References: CVE-2020-14929 CVSS scores: CVE-2020-14929 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2020-14929 SUSE: 7.5...

CVE-2019-11755: Improper Verification of Cryptographic Signature

A crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer was shown as having a valid digital signature, although the signer might have had no access to the contents of the encrypted message, and might have stripped a different signature from the encrypted...

CVE-2013-5182: Undefined Security Weakness

Mail in Apple Mac OS X before 10.9 allows remote attackers to spoof the existence of a cryptographic signature for an e-mail message by using the multipart/signed content type within an unsigned message...

PT-2013-5427

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.9 Description The issue allows remote attackers to spoof the existence of a cryptographic signature for an e-mail message. This is achieved by using the multipart/signed content type within an unsigned...