imap vulnerabilities and fixes

Recent CVEs affecting imap, with upgrade or downgrade steps. 5 tracked.

imap has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-09-09. Highest priority: CVE-2026-61915 (score 19/100).

• CVE-2026-61908 LOW 3.1 UPGRADE An issue was discovered in Cyrus IMAP before 3.12.4
• CVE-2026-61909 LOW 3.5 UPGRADE An issue was discovered in Cyrus IMAP before 3.12.4
• CVE-2026-61910 LOW 3.5 UPGRADE An issue was discovered in Cyrus IMAP before 3.12.4
• CVE-2026-61911 MEDIUM 4.3 UPGRADE An issue was discovered in Cyrus IMAP before 3.12.4
• CVE-2026-61915 MEDIUM 4.2 UPGRADE An issue was discovered in Cyrus IMAP before 3.12.4

FAQ

How do I fix imap vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is imap being exploited right now?

None of the tracked imap CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which imap CVE should I patch first?

CVE-2026-61915 currently ranks highest (19/100): An issue was discovered in Cyrus IMAP before 3.12.4.

RSS feed for imap · ← Back to latest CVEs