Login Request a demo
SO
Product
SOGo
by Alinto · last CVE Sep 17, 2026
18
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 0High 4Medium 13Low 1
Severity
All severities18Critical0High4Medium13Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add SOGo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2015-5395
8.8
1%
Sep 20
Cross-site request forgery (CSRF) vulnerability in SOGo before 3.1.0
Affected: before 3.1.0
CVE-2026-93453
8.3
0%
Sep 17
SOGo before 5.12.11 Password Reset Token Interception via Origin Header
Affected: before 5.12.11
CVE-2026-46446
7.1
0%
May 14
SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored, allows SQL injection
Affected: before 5.12.7
CVE-2026-46445
7.1
0%
May 14
SOGo before 5.12.7, when PostgreSQL is used, allows SQL injection
Affected: before 5.12.7
Showing 4