Search: CVE-2026-61911

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.2%	CVE-2026-61911cyrusimap Cyrus IMAP · Exposure of Sensitive System Information to an Unauthorized Control Sphere Medium4.3EPSS 0.2%2026-09-09CVE Database V5CVE-2026-61911 CVE-2026-61911 is a medium severity vulnerability in Cyrus IMAP before version 3.12.4. It allows an authenticated user to leverage a Sieve script to detect the existence of another user's private mailbox or read shared mailbox annotations by observing LMTP delivery behavior. This vulnerability exposes sensitive system information but does not permit modification or denial of service. EPSS 0.2%Vulnerability CWE-497	CVE Database V5	2026-09-09

Page 1 of 1