PT-2026-60554 · Unknown · Cyrus Imap
CVE-2026-47086
·
Published
2026-07-16
·
Updated
2026-07-17
CVSS v3.1
3.5
Low
| Vector | AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Cyrus IMAP versions prior to 3.12.3
Description
An issue exists where tokens issued via the
GENURLAUTH command can bypass Access Control Lists (ACLs). An authenticated user can generate a URLAUTH token for any specified mailbox, regardless of whether they have read access. This allows the unauthorized reading of emails from mailboxes for which the user has no granted permissions.Recommendations
Update Cyrus IMAP to version 3.12.3 or later.
As a temporary mitigation, restrict the use of the
GENURLAUTH command.Fix
Incorrect Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cyrus Imap