What’s Vulnerable › Products

Alinto SOGo vulnerabilities

18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your Alinto SOGo version is affected

Latest Alinto SOGo vulnerabilities

• CVE-2026-93453 — SOGo before 5.12.11 Password Reset Token Interception via Origin Header (CVSS 8.3)
• CVE-2026-46446 — (CVSS 7.1)
• CVE-2026-46445 — (CVSS 7.1)
• CVE-2026-33550 — (CVSS 2.6)
• CVE-2025-71276 — (CVSS 6.1)
• CVE-2026-3054 — Alinto SOGo cross site scripting (CVSS 6.1)
• CVE-2025-63499 — (CVSS 6.1)
• CVE-2025-63498 — (CVSS 6.1)
• CVE-2024-24510 — (CVSS 6.1)
• CVE-2024-34462 — (CVSS 6.1)
• CVE-2023-48104 — (CVSS 6.1)
• CVE-2022-4558 — Alinto SOGo Folder/Mail NSString+Utilities.m cross site scripting (CVSS 6.1)
• CVE-2022-4556 — Alinto SOGo Identity SOGoUserDefaults.m _migrateMailIdentities cross site scripting (CVSS 6.1)
• CVE-2015-5395 — (CVSS 8.8)
• CVE-2016-6191 — (CVSS 6.1)
• CVE-2016-6189 — (CVSS 4.3)
• CVE-2014-9905 — (CVSS 6.1)
• CVE-2016-6188 — (CVSS 6.5)