[NEW] [medium] cyrus imap: Multiple vulnerabilities

mediumCVE-2026-47081 CVE-2026-47082 CVE-2026-47083 CVE-2026-47084 CVE-2026-47086 CVE-2026-47087

An attacker can exploit multiple vulnerabilities in cyrus imap to bypass security measures and disclose or manipulate data.

CSIRTS triage

vendor: cyrus product: imapOther

What: Multiple vulnerabilities in cyrus imap can be exploited to bypass security measures.
Who is affected: Users of cyrus imap are affected.
Urgency: Remediation is important to protect against data manipulation and disclosure.
Action: Update cyrus imap to the latest version to address these vulnerabilities.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch imap

Get an email when a new imap advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity: medium
Published: 2026-07-20
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2387

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-470810.16% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 6% of all scored CVEs.
Low exploitation riskCVE-2026-470820.20% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 10% of all scored CVEs.
Low exploitation riskCVE-2026-470830.19% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 9% of all scored CVEs.
Low exploitation riskCVE-2026-470840.21% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 12% of all scored CVEs.
Low exploitation riskCVE-2026-470860.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 8% of all scored CVEs.
Low exploitation riskCVE-2026-470870.19% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 9% of all scored CVEs.
Low exploitation riskCVE-2026-470880.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 8% of all scored CVEs.
Low exploitation riskCVE-2026-470890.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 8% of all scored CVEs.
Low exploitation riskCVE-2026-470850.20% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 10% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-47081	coverage & exploitation status	NVD · CVE.org
CVE-2026-47082	coverage & exploitation status	NVD · CVE.org
CVE-2026-47083	coverage & exploitation status	NVD · CVE.org
CVE-2026-47084	coverage & exploitation status	NVD · CVE.org
CVE-2026-47086	coverage & exploitation status	NVD · CVE.org
CVE-2026-47087	coverage & exploitation status	NVD · CVE.org
CVE-2026-47088	coverage & exploitation status	NVD · CVE.org
CVE-2026-47089	coverage & exploitation status	NVD · CVE.org
CVE-2026-47085	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

Recent advisories for cyrus imap

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

mediumCVE-2026-47089: An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. LISTRIGHTS os not limited…nvd · 2026-07-16
lowCVE-2026-47088: An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in…nvd · 2026-07-16
lowCVE-2026-47087: An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH does not honor re…nvd · 2026-07-16
lowCVE-2026-47086: An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. GENURLAUTH-issued tokens …nvd · 2026-07-16
mediumCVE-2026-47085: An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH token forgery can…nvd · 2026-07-16
mediumCVE-2026-47084: An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The LOCALDELETE command b…nvd · 2026-07-16