Skip to content
OpenAdvisories

Product · Alinto

SOGo Webmail

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-8851

    SOGo < 5.12.8 SQL Injection via addUserInAcls endpoint

    SOGo versions 5.12.7 and prior contains a SQL injection vulnerability in the Access Control List management functionality that allows authenticated users to extract arbitrary data from the database by injecting SQL subqueries through the uid parameter of the …

    Alinto SOGo Webmail sogo sogo Debian Ubuntu