Skip to content
OpenAdvisories

Vendor

YunoHost-Apps

3 known vulnerabilities.

Products

sogo_yhn 2 transmission_ynh 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-74865

    Authentication Bypass in sogo_yhn

    sogo_yhn configures SOGo with a parameter "SOGoTrustProxyAuthentication=YES". This causes the password to be bypassed during HTTP Basic authentication. An unauthenticated attacker who provides the username of an existing user and any arbitrary password can su…

    YunoHost-Apps sogo_yhn
  • Critical 9.3
    CVE-2026-74864

    Authentication Bypass in sogo_yhn

    sogo_yhn configures SOGo with a parameter that forces the request with HTTP header "x-webobjects-remote-user" to be treated as sent by a verified user without performing password validation. Since Nginx does not strip this header, any client can supply it arb…

    YunoHost-Apps sogo_yhn