CVE-2026-39178 | SOGo up to 5.12.6 AllContactSearch Endpoint sql injection

July 9, 2026 Yanac

A vulnerability classified as critical was found in SOGo up to 5.12.6. Affected by this issue is some unknown functionality of the component AllContactSearch Endpoint. Such manipulation of the argument Search leads to sql injection.

This vulnerability is listed as CVE-2026-39178. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More