# cyrusimap Cyrus IMAP.

Every CVE that names cyrusimap Cyrus IMAP among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Double free in cyrusimap Cyrus IMAP](https://agentprime.io/advisories/CVE-2026-61915.md)
  `CVE-2026-61915` · CVE record: cyrusimap Cyrus IMAP · CVSS 4.2 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [An issue was discovered in Cyrus IMAP before 3.12.4.](https://agentprime.io/advisories/CVE-2026-61911.md)
  `CVE-2026-61911` · CVE record: cyrusimap Cyrus IMAP · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Incorrect authorization in cyrusimap Cyrus IMAP](https://agentprime.io/advisories/CVE-2026-61910.md)
  `CVE-2026-61910` · CVE record: cyrusimap Cyrus IMAP · CVSS 3.5 Low · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [An issue was discovered in Cyrus IMAP before 3.12.4.](https://agentprime.io/advisories/CVE-2026-61909.md)
  `CVE-2026-61909` · CVE record: cyrusimap Cyrus IMAP · CVSS 3.5 Low · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-420
- [Out-of-bounds read in cyrusimap Cyrus IMAP](https://agentprime.io/advisories/CVE-2026-61908.md)
  `CVE-2026-61908` · CVE record: cyrusimap Cyrus IMAP · CVSS 3.1 Low · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Incorrect authorization in cyrusimap Cyrus IMAP](https://agentprime.io/advisories/CVE-2026-61907.md)
  `CVE-2026-61907` · CVE record: cyrusimap Cyrus IMAP · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Missing authorization in cyrusimap Cyrus IMAP](https://agentprime.io/advisories/CVE-2026-47089.md)
  `CVE-2026-47089` · CVE record: cyrusimap Cyrus IMAP · CVSS 4.3 Medium · Not analysed yet · Published 16 Jul 2026 · Tags: Broken access control
- [An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.](https://agentprime.io/advisories/CVE-2026-47088.md)
  `CVE-2026-47088` · CVE record: cyrusimap Cyrus IMAP · CVSS 3.1 Low · Not analysed yet · Published 16 Jul 2026 · Tags: CWE-126
- [An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.](https://agentprime.io/advisories/CVE-2026-47087.md)
  `CVE-2026-47087` · CVE record: cyrusimap Cyrus IMAP · CVSS 3.5 Low · Not analysed yet · Published 16 Jul 2026 · Tags: CWE-672
- [Incorrect authorization in cyrusimap Cyrus IMAP](https://agentprime.io/advisories/CVE-2026-47086.md)
  `CVE-2026-47086` · CVE record: cyrusimap Cyrus IMAP · CVSS 3.5 Low · Not analysed yet · Published 16 Jul 2026 · Tags: Broken access control
- [An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.](https://agentprime.io/advisories/CVE-2026-47085.md)
  `CVE-2026-47085` · CVE record: cyrusimap Cyrus IMAP · CVSS 4.0 Medium · Not analysed yet · Published 16 Jul 2026 · Tags: CWE-340
- [Incorrect authorization in cyrusimap Cyrus IMAP](https://agentprime.io/advisories/CVE-2026-47084.md)
  `CVE-2026-47084` · CVE record: cyrusimap Cyrus IMAP · CVSS 6.5 Medium · Not analysed yet · Published 16 Jul 2026 · Tags: Broken access control
- [An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.](https://agentprime.io/advisories/CVE-2026-47083.md)
  `CVE-2026-47083` · CVE record: cyrusimap Cyrus IMAP · CVSS 4.3 Medium · Not analysed yet · Published 16 Jul 2026 · Tags: CWE-204
- [Incorrect authorization in cyrusimap Cyrus IMAP](https://agentprime.io/advisories/CVE-2026-47082.md)
  `CVE-2026-47082` · CVE record: cyrusimap Cyrus IMAP · CVSS 5.4 Medium · Not analysed yet · Published 16 Jul 2026 · Tags: Broken access control
- [Incorrect authorization in cyrusimap Cyrus IMAP](https://agentprime.io/advisories/CVE-2026-47081.md)
  `CVE-2026-47081` · CVE record: cyrusimap Cyrus IMAP · CVSS 3.1 Low · Not analysed yet · Published 16 Jul 2026 · Tags: Broken access control

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=cyrusimap-cyrus-imap>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/cyrusimap-cyrus-imap/>. Everything for agents: <https://agentprime.io/llms.txt>.