DailyCVE@dailycve
Disclosure
🟠 SOGo, XSS, #CVE-2025-71276 (Medium) https://dailycve.com/sogo-xss-cve-2025-71276-medium/
Post summary
A medium‑severity XSS vulnerability (CVE‑2025‑71276) was disclosed for SOGo.
0000061
173 followersView on X
CVE-2025-71276Disclosure(alinto / sogo)
LOWCVSS 6.1 · MEDIUMSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories.
0.0/ 10 priority
Sources & remediation
Weakness type (CWE)
CWE-79
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- sogo
Threat summary
- 4 mentions across 2 observed days
- Momentum state: stable
What's happening
- Technical details provided in 3 signals
- Disclosure: 3 classified signals
- General: 1 classified signal
- Peaked 1d ago at 3 mentions (2026-03-22); latest day: 1
- 4 total mentions across 2 days
Affected systems
Vendors
Products
sogo
Deep dive
Activity timeline4 mentions / 2d
Signal classification2 categories
Disclosure375.0%
General125.0%
Referenced assets4 URLs
Classification over time
| Date | Total | Labels |
|---|
| 2026-03-22 | 3 | Disclosure2General1 |
| 2026-03-24 | 1 | Disclosure1 |
Full discourse4 posts
CVEarity@CVEarityGeneral⚡ New CVE Alert: CVE-2025-71276 📊 Severity: 6.4 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-71276 #CVE-2025-71276 #CVE #Medium #CyberSecurity #InfoSec https://t.co/jo7MhYTO6u
Post summary
The tweet simply announces the existence of CVE‑2025‑71276 with basic severity and product impact information, but provides no actionable or detailed security intelligence.
0000082111 followersView on X
CVE@CVEnewDisclosureCVE-2025-71276 SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories. https://www.cve.org/CVERecord?id=CVE-2025-71276
Post summary
The text announces CVE-2025-71276 as an XSS vulnerability in SOGo versions before 5.12.5, specifying the affected categories and linking to the CVE record.
0000010856.8K followersView on X
Vulmon Vulnerability Feed@VulmonFeedsDisclosureCVE-2025-71276 Cross-Site Scripting Vulnerability in SOGo Groupware Before Version 5.12.5 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-71276
Post summary
A new cross‑site scripting vulnerability (CVE‑2025‑71276) affecting SOGo Groupware before version 5.12.5 has been disclosed, with no evidence of PoC, exploitation, or available patches.
00000754.0K followersView on X
CPE platform detail1 entries
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | alinto | sogo | - | - | - |