YunoHost-Apps Sogo Yhn

2 known vulnerabilities in YunoHost-Apps Sogo Yhn, 2 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-74865 CVSS 9.2 critical sogo_yhn configures SOGo with a parameter "SOGoTrustProxyAuthentication=YES". This causes the password to be bypassed during HTTP Basic…
CVE-2026-74864 CVSS 9.3 critical sogo_yhn configures SOGo with a parameter that forces the request with HTTP header "x-webobjects-remote-user" to be treated as sent by a…