Product by Debian

Sogo

13 known vulnerabilities in Sogo (Debian), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Sogo (Debian)

High	CVE-2026-93453	SOGo before 5.12.11 Password Reset Token Interception via Origin Header also in 2 other products	8.3	17.09.2026
High	CVE-2015-5395	Alinto SOGo: Cross-Site Request Forgery (CSRF) also in 2 other products	8.8	20.09.2017
High	CVE-2021-33054	Inverse Sogo: security vulnerability also in 2 other products	7.5	04.06.2021
High	CVE-2026-8851	SOGo < 5.12.8 SQL Injection via addUserInAcls endpoint also in 2 other products	8.1	18.05.2026
Medium	CVE-2026-8496	A cross-site scripting (XSS) vulnerability in Alinto SOGo, version 5.12.7 also in 1 other product	6.1	13.05.2026
High	CVE-2026-46446	Alinto SOGo: SQL Injection also in 2 other products	7.1	14.05.2026
High	CVE-2026-46445	Alinto SOGo: SQL Injection also in 2 other products	7.1	14.05.2026
Medium	CVE-2026-3054	Alinto SOGo cross site scripting also in 2 other products	4.3	24.02.2026
Medium	CVE-2025-63499	Alinto SOGo: Cross-site Scripting also in 2 other products	6.1	04.12.2025
Medium	CVE-2025-71276	Alinto SOGo: Cross-site Scripting also in 2 other products	6.4	22.03.2026
Medium	CVE-2025-63498	Alinto SOGo: Cross-Site Scripting (XSS) also in 3 other products	6.1	24.11.2025
Medium	CVE-2024-34462	Alinto SOGo: Cross-Site Scripting (XSS) also in 2 other products	6.1	04.05.2024
Low	CVE-2026-33550	Alinto SOGo: Use of Single-factor Authentication also in 2 other products	2.0	22.03.2026