Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length (only 12 digits instead of the 20 recommended).
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
⚡ New CVE Alert: CVE-2026-33550 📊 Severity: 2.0 🚨 Risk Level: Low 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-33550 #CVE-2026-33550 #CVE #Low #CyberSecurity #InfoSec https://t.co/DkbOX2jwwU
Post summary
The tweet announces a new CVE (CVE‑2026‑33550) with a low severity score but offers no detailed technical information or mitigation guidance.
CVE-2026-33550 SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length (only 12 digits instead of the 20 recommended). https://www.cve.org/CVERecord?id=CVE-2026-33550
Post summary
The CVE highlights that pre‑5.12.5 SOGo fails to renew OTPs and generates only 12‑digit codes, falling short of the 20‑digit recommendation, thereby weakening authentication.
CVE-2026-33550 SOGo OTP Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-33550
Post summary
The provided text only lists a CVE identifier and a URL, without any further details on the vulnerability or its exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | alinto | sogo | - | - | - |