[ Vendor · 2 CVEs ]
YunoHost-Apps
CVEs affecting YunoHost-Apps published in the last 30 days, plus any YunoHost-Apps CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-74865 | 30 Sep 2026 | CVSS 9.2 | YunoHost-Apps sogo_yhnsogo_yhn configures SOGo with a parameter "SOGoTrustProxyAuthentication=YES". This causes the password to be bypassed during HTTP Basic… | |
| CVE-2026-74864 | 30 Sep 2026 | CVSS 9.3 | YunoHost-Apps sogo_yhnsogo_yhn configures SOGo with a parameter that forces the request with HTTP header "x-webobjects-remote-user" to be treated as sent by a verified… |