by Kastro
Paper/Archive/CVE-2026-74865

CVE-2026-74865

YunoHost-Apps sogo_yhn — Authentication Bypass in sogo_yhn

EPSS 0.4%CVSS 9.2
critical.is priorityof 100
34
CVSS 9.2 (CNA)9.2 / 10 × 3027.6Not in CISA KEV+300.0EPSS percentile 31.9.319 × 206.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

sogo_yhn configures SOGo with a parameter "SOGoTrustProxyAuthentication=YES". This causes the password to be bypassed during HTTP Basic authentication. An unauthenticated attacker who provides the username of an existing user and any arbitrary password can successfully log in to that user's account. This issue was fixed in version 5.8.0~ynh9.

Affected

ProductAffectedFixed inSource
sogo_yhn< 5.8.0~ynh95.8.0~ynh9CNA

Scores by source

CERT-PL (CNA)9.2CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

writeupcert.pl/en/posts/2026/09/CVE-2026-74864refforum.yunohost.org/t/sogo-critical-vulnerability-fixed-in-5-8-0-ynh9/42699