Read the docs
TI-2026-52583 Aliases CVE-2026-74864GHSA-fxx9-8vhm-fwhc

Authentication Bypass in sogo_yhn

Priority MEDIUM 48CWE-639Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-639.

Summary

sogo_yhn configures SOGo with a parameter that forces the request with HTTP header "x-webobjects-remote-user" to be treated as sent by a verified user without performing password validation. Since Nginx does not strip this header, any client can supply it arbitrarily and gain access as any user, including a privileged user, without providing a password. This issue was fixed in version 5.8.0~ynh9.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00406 35th percentileScored 2026-11-07
Fix Fixed sogo_yhn (YunoHost-Apps): 5.8.0~ynh9

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
YunoHost-Appssogo_yhnbefore 5.8.0~ynh95.8.0~ynh9Patch availableCNA
  • sogo_yhn VendorYunoHost-Apps Affected before 5.8.0~ynh9 Fixed in 5.8.0~ynh9 Patch available CNA

Remediation

  • Fix · CNA sogo_yhn (YunoHost-Apps) Fixed in 5.8.0~ynh9

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    YunoHost-Apps sogo_yhn 5.8.0~ynh9

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-52584 Authentication Bypass in sogo_yhnPriority MEDIUM 42
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-74864
  2. 2026-10-03 Alias added: GHSA-fxx9-8vhm-fwhc

References

Advisory 1

Other 1

  • TI-2026-52584 Authentication Bypass in sogo_yhn CVSS 4.0CRITICAL 9.2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences