CVE-2026-74865
Authentication Bypass in sogo_yhn
- State
- Published
- Severity
- 9.2 Critical
- Published
- Sep 30, 2026
- Updated
- Sep 30, 2026
- Reserved
- Aug 17, 2026
Description
sogo_yhn configures SOGo with a parameter "SOGoTrustProxyAuthentication=YES". This causes the password to be bypassed during HTTP Basic authentication. An unauthenticated attacker who provides the username of an existing user and any arbitrary password can successfully log in to that user's account.
This issue was fixed in version 5.8.0~ynh9.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 9.2 Critical | CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | CERT-PL |
Weaknesses
- CWE-639 Authorization bypass through User-Controlled key
Affected Products
| Product | Versions |
|---|---|
sogo_yhnYunoHost-Apps |
|
References
- https://cert.pl/en/posts/2026/09/CVE-2026-74864third-party-advisory
- https://forum.yunohost.org/t/sogo-critical-vulnerability-fixed-in-5-8-0-ynh9/42699issue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.