Vendor
Cyrus
22 known vulnerabilities in products by Cyrus, 0 of them actively exploited (CISA KEV).
Key figures
22
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-11356 | Cyrus IMAP: Code Execution | 9.8 | |
| Critical | CVE-2019-18928 | Cyrus IMAP: Privilege Escalation | 9.8 | |
| Critical | CVE-2017-14230 | Cyrus IMAP: Use of Uninitialized Memory | 9.1 | |
| High | CVE-2021-33582 | Cyrus IMAP: Denial of Service | 7.5 | |
| Medium | CVE-2019-19783 | Cyrus IMAP: security vulnerability | 6.5 | |
| Not rated | CVE-2006-2502 | Cyrus Imapd: Stack-Based Buffer Overflow | — | |
| Not rated | CVE-2002-2253 | Cyrus Libsieve: Buffer Overflow | — | |
| Medium | CVE-2021-32056 | Cyrus IMAP: security vulnerability | 4.3 | |
| Not rated | CVE-2005-0546 | Cyrus Imapd: Stack-Based Buffer Overflow | — | |
| Not rated | CVE-2005-0373 | Cyrus Sasl: Buffer Overflow | — | |
| Not rated | CVE-2011-3372 | Cyrus Imapd: Authentication Bypass | — | |
| Not rated | CVE-2015-8077 | Cyrus IMAP: Integer Overflow | — | |
| Not rated | CVE-2015-8076 | Cyrus IMAP: Out-of-Bounds Access | — | |
| Not rated | CVE-2015-8078 | Cyrus IMAP: Integer Overflow | — | |
| Not rated | CVE-2006-1721 | Cyrus Sasl: Denial of Service | — | |
| High | CVE-2026-61915 | Cyrus IMAP: Double Free | 4.2 | |
| Medium | CVE-2026-61911 | Cyrus IMAP: Exposure of Sensitive System Information to an Unauthorized Control Sphere | 4.3 | |
| Medium | CVE-2026-61909 | Cyrus IMAP: Unprotected Alternate Channel | 3.5 | |
| Medium | CVE-2026-61910 | Cyrus IMAP: Incorrect Authorization | 3.5 | |
| Medium | CVE-2026-61908 | Cyrus IMAP: Out-of-bounds Read | 3.1 | |
| Not rated | CVE-2002-2043 | Cyrus Sasl: SQL Injection | — | |
| Not rated | CVE-2004-0884 | Cyrus Sasl: Code Execution | — |
Products
| Cyrus IMAP | 14 | 0 |
| Sasl | 4 | 0 |
| Imapd | 3 | 0 |