Low severity · published Jul 16, 2026
CVE-2026-47088
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2
3.1
CVSS
0.3%
EPSS
No
On KEV
Description
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in nested MIME comment parsing. An authenticated IMAP user could craft an email message containing an RFC 822 comment ending with a backslash. When parsing the message, the server would read past the message's end in memory, and read into the heap, returning the read content to the user.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CI
Cyrus IMAP · cyrusimap
before 3.12.3 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-47088
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-47088
www.cyrusimap.org
https://www.cyrusimap.org/3.12/imap/download/release-notes/3.12/x/3.12.3.html
www.cyrusimap.org
https://www.cyrusimap.org/imap/download/release-notes/index.html
More from Cyrus IMAP
7.1
CVE-2026-61915
An issue was discovered in Cyrus IMAP before 3.12.4
6.5
CVE-2026-61908
An issue was discovered in Cyrus IMAP before 3.12.4
6.5
CVE-2026-47084
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2
6.5
CVE-2024-34055
Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command
6.5
CVE-2017-12843
Cyrus IMAP before 3.0.3 allows remote authenticated users to write to arbitrary files via a crafted (1) SYNCAPPLY, (2) SYNCGET or (3) SYNCRESTORE command