CVE-2026-47087
Low · 3.5CVSS
3.5
EPSS
0.3%
Published
Jul 16, 2026
CISA due date
—
The record
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH does not honor revoked authorizer access. A URLAUTH URL minted while the authorizer had access continued to work after that access was revoked.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-62966 ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32… CWE-672
- CVE-2026-93006 A flaw was found in dnsmasq. CWE-672
- CVE-2026-115402 OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a… CWE-672
- CVE-2026-53918 odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. CWE-672
- CVE-2026-57446 libIEC61850 is an open-source implementation of IEC 61850 client and server protocols… CWE-672
- CVE-2026-98124 In the Linux kernel, the following vulnerability has been resolved: smb/client… CWE-672
- CVE-2026-98080 In the Linux kernel, the following vulnerability has been resolved: btrfs: do not force… CWE-672
- CVE-2026-55250 Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0… CWE-672