CVE-2026-33550

Опубликовано: 22 мар. 2026

Источник: nvd

CVSS3: 2

CVSS3: 2.6

EPSS Низкий

Описание

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length (only 12 digits instead of the 20 recommended).

Конфигурация 1

cpe:2.3:a:alinto:sogo:*:*:*:*:*:*:*:*

Версия до 5.12.5 (исключая)

EPSS

Процентиль: 3%

0.00135

Низкий

2 Low

CVSS3

2.6 Low

CVSS3

CWE-308

CVE-2026-33550

CVSS3: 2

ubuntu

5 месяцев назад

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length (only 12 digits instead of the 20 recommended).

CVE-2026-33550

CVSS3: 2

debian

5 месяцев назад

SOGo before 5.12.5 does not renew the OTP if a user disables/enables i ...

GHSA-9x6p-jf26-xmx7

CVSS3: 2

github

5 месяцев назад

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length (only 12 digits instead of the 20 recommended).

EPSS

Процентиль: 3%

0.00135

Низкий

2 Low

CVSS3

2.6 Low

CVSS3

CWE-308