CVE-2026-61909 | Cyrus IMAP up to 3.8.7/3.10.3/3.12.3 CalDAV/CardDAV information disclosure

A vulnerability classified as problematic has been found in Cyrus IMAP up to 3.8.7/3.10.3/3.12.3. The affected element is an unknown function of the component CalDAV/CardDAV. This manipulation causes information disclosure.

The identification of this vulnerability is CVE-2026-61909. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More