Medium severity · published Jul 16, 2026
CVE-2026-47083
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2
4.3
CVSS
0.3%
EPSS
No
On KEV
Description
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an ESEARCH cross-user content oracle. By using the ESEARCH command, an authenticated IMAP user could enumerate folder names under any account they could name. Search would return UIDs of messages matching the search, creating a content oracle (without allowing arbitrary reads of the target's content).
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CI
Cyrus IMAP · cyrusimap
before 3.12.3 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-47083
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-47083
www.cyrusimap.org
https://www.cyrusimap.org/3.12/imap/download/release-notes/3.12/x/3.12.3.html
www.cyrusimap.org
https://www.cyrusimap.org/imap/download/release-notes/index.html
More from Cyrus IMAP
7.1
CVE-2026-61915
An issue was discovered in Cyrus IMAP before 3.12.4
6.5
CVE-2026-61908
An issue was discovered in Cyrus IMAP before 3.12.4
6.5
CVE-2026-47084
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2
6.5
CVE-2024-34055
Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command
6.5
CVE-2017-12843
Cyrus IMAP before 3.0.3 allows remote authenticated users to write to arbitrary files via a crafted (1) SYNCAPPLY, (2) SYNCGET or (3) SYNCRESTORE command