{"id":"CVE-2026-74864","published":"2026-09-30T13:17:19.913","lastModified":"2026-09-30T19:57:08.043","description":"sogo_yhn configures SOGo with a parameter that forces the request with HTTP header \"x-webobjects-remote-user\" to be treated as sent by a verified user without performing password validation. Since Nginx does not strip this header, any client can supply it arbitrarily and gain access as any user, including a privileged user, without providing a password.\n\n\n\n\nThis issue was fixed in version 5.8.0~ynh9.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-639"],"vendors":[],"products":[],"references":[{"url":"https://cert.pl/en/posts/2026/09/CVE-2026-74864","tags":[]},{"url":"https://forum.yunohost.org/t/sogo-critical-vulnerability-fixed-in-5-8-0-ynh9/42699","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}