PatchTheCVEcyrus vulnerabilities
Recent CVEs affecting cyrus products. 5 tracked.
cyrus has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-09-09. Highest priority: CVE-2026-61915 (score 19/100).
- CVE-2026-61908 LOW 3.1 UPGRADE An issue was discovered in Cyrus IMAP before 3.12.4
- CVE-2026-61909 LOW 3.5 UPGRADE An issue was discovered in Cyrus IMAP before 3.12.4
- CVE-2026-61910 LOW 3.5 UPGRADE An issue was discovered in Cyrus IMAP before 3.12.4
- CVE-2026-61911 MEDIUM 4.3 UPGRADE An issue was discovered in Cyrus IMAP before 3.12.4
- CVE-2026-61915 MEDIUM 4.2 UPGRADE An issue was discovered in Cyrus IMAP before 3.12.4
FAQ
How do I fix cyrus vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cyrus being exploited right now?
None of the tracked cyrus CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cyrus CVE should I patch first?
CVE-2026-61915 currently ranks highest (19/100): An issue was discovered in Cyrus IMAP before 3.12.4.