Security Advisory

CVE-2026-46446

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-14 03:13:36

Last updated 2026-05-14 13:52:19

Assigner mitre

CVSS score 7.1

State PUBLISHED

Description

SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored, allows SQL injection. This is related to c_password = '%@' in changePasswordForLogin.

← Browse all CVEs View on cve.org ↗