CVE-2026-47085

creationtimestamp| type| source ---|---|--- 2026-07-16 20:29:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqs3ajrwot2x...

CVE-2026-47085

CVE-2026-47085 affects Cyrus IMAPD (up to 3.12.2). The flaw: URLAUTH token forgery via a missing mboxkey, allowing an attacker who knows a folder name the user never authorized to forge a valid URLAUTH by computing an HMAC-SHA1 with a predictable key, granting read access to the mailbox. Impact i...