https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 04:48:01 +0000 https://vulnerability.circl.lu/vuln/cve-2026-61907 <p><strong>Affected:</strong> cyrusimap Cyrus IMAP</p> <p>An issue was discovered in Cyrus IMAP before 3.12.4. JMAP snooze bypasses the destination-mailbox ACL. An authenticated user with insert permissions on another user&#39;s snoozed mailbox could cause insertion of mail to that user&#39;s inbox, or any other of their mailboxes whose id was known to the user, despite having no insert permissions to the target mailbox.</p> <p><strong>Affected:</strong> cyrusimap Cyrus IMAP</p> <p>An issue was discovered in Cyrus IMAP before 3.12.4. JMAP snooze bypasses the destination-mailbox ACL. An authenticated user with insert permissions on another user&#39;s snoozed mailbox could cause insertion of mail to that user&#39;s inbox, or any other of their mailboxes whose id was known to the user, despite having no insert permissions to the target mailbox.</p> https://vulnerability.circl.lu/vuln/cve-2026-61907