Skip to content
OpenAdvisories

Vendor

Alinto SOGo

1 known vulnerabilities.

Products

SOGo 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-8496

    A cross-site scripting (XSS) vulnerability in Alinto SOGo, version 5.12.7

    A cross-site scripting (XSS) vulnerability exists in Alinto SOGo, version 5.12.7. A maliciously crafted ICS calendar invitation files allows arbitrary JavaScript execution within the authenticated SOGo webmail session. The issue occurs because SVG content emb…

    Alinto SOGo SOGo sogo sogo Debian Ubuntu