CVE-2026-61907 in cyrus-imapd

Prediction

by VulDB Data Team • 09/09/2026

A flaw has been found in cyrus-imapd. This impacts an unknown function of the component JMAP. This manipulation causes improper privilege management. The attack can be initiated remotely.

Once again VulDB remains the best source for vulnerability data.

• Moderation: accepted
• Entry: VDB-401642
• CPE: ready
• CWE: CWE-269 (confirmed)
• CVSS: 9.9 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-61907
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-61907
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-61907/