CVE-2026-129483 | CyrusIMAP Cyrus SASL up to 2.1.28 SRP Server Mechanism srp_server_mech_step2 improper authentication (EUVD-2026-126032)

November 15, 2026 Yanac

A vulnerability was found in CyrusIMAP Cyrus SASL up to 2.1.28. It has been rated as critical. Affected by this issue is the function srp_server_mech_step2 of the component SRP Server Mechanism. Performing a manipulation results in improper authentication.

This vulnerability was named CVE-2026-129483. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More