CVE-2026-61910 | Cyrus IMAP up to 3.8.7/3.10.3/3.12.3 Mailbox Mailbox/set privileges management

September 9, 2026 Yanac

A vulnerability described as critical has been identified in Cyrus IMAP up to 3.8.7/3.10.3/3.12.3. Impacted is the function Mailbox/set of the component Mailbox. The manipulation results in improper privilege management.

This vulnerability was named CVE-2026-61910. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More