Advisories · Technology

Alinto SOGo.

Every CVE that names Alinto SOGo among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-93453 CVE record

CVSS 8.7 High

SOGo before 5.12.11 Password Reset Token Interception via Origin Header
- Alinto SOGo
- CWE-640
Not analysed yet 17 Sept 2026
CVE-2026-46446 CVE record

CVSS 7.1 High

SQL injection in Alinto SOGo
- Alinto SOGo
- SQL injection
Not analysed yet 14 May 2026
CVE-2026-46445 CVE record

CVSS 7.1 High

SQL injection in Alinto SOGo
- Alinto SOGo
- SQL injection
Not analysed yet 14 May 2026
CVE-2026-33550 CVE record

CVSS 2.0 Low

Alinto SOGo: SOGo before 5.12.5 does not renew the OTP if a user disables/enables it…
- Alinto SOGo
- CWE-308
Not analysed yet 22 Mar 2026
CVE-2025-71276 CVE record

CVSS 6.4 Medium

Cross-site scripting in Alinto SOGo
- Alinto SOGo
- Cross-site scripting (XSS)
Not analysed yet 22 Mar 2026
CVE-2026-3054 CVE record

CVSS 5.3 Medium

Alinto SOGo cross site scripting
- Alinto SOGo
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 24 Feb 2026
CVE-2022-4558 CVE record

CVSS 3.5 Low

Alinto SOGo Folder/Mail NSString+Utilities.m cross site scripting
- Alinto SOGo
- CWE-707
Not analysed yet 16 Dec 2022
CVE-2022-4556 CVE record

CVSS 3.5 Low

Alinto SOGo Identity SOGoUserDefaults.m _migrateMailIdentities cross site scripting
- Alinto SOGo
- CWE-707
Not analysed yet 16 Dec 2022