Read the docs

YunoHost-Apps

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

YunoHost-Apps records in CISA KEV

No YunoHost-Apps vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-52583 CVE-2026-74864 · GHSA-fxx9-8vhm-fwhc

Authentication Bypass in sogo_yhn

Priority MEDIUM 48

sogo_yhn configures SOGo with a parameter that forces the request with HTTP header "x-webobjects-remote-user" to be treated as sent by a verified user without performing password validation.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00406 Published 2026-09-30 Fixed in 5.8.0~ynh9 CWE-639
TI-2026-52584 CVE-2026-74865 · GHSA-jfr8-42vv-2p3v

Authentication Bypass in sogo_yhn

Priority MEDIUM 42

sogo_yhn configures SOGo with a parameter "SOGoTrustProxyAuthentication=YES".

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00379 Published 2026-09-30 Fixed in 5.8.0~ynh9 CWE-639
Open these records in search →