CVE-2026-8851Disclosure

LOWCVSS 8.6 · HIGH

Signal is active with 4 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

SOGo versions 5.12.7 and prior contains a SQL injection vulnerability in the Access Control List management functionality that allows authenticated users to extract arbitrary data from the database by injecting SQL subqueries through the uid parameter of the addUserInAcls endpoint. Attackers can inject malicious SQL code to write extracted data into the sogo_acl table and retrieve it through the /acls API, establishing an out-of-band data exfiltration channel.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
4 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
Disclosure: 2 classified signals
General: 2 classified signals
4 total mentions across 1 day

Deep dive

Activity timeline4 mentions / 1d

Signal classification2 categories

Disclosure

250.0%

General

250.0%

Referenced assets5 URLs

By indicator

Full discourse4 posts

ADK Cyber@ADKCyber145d
Disclosure
CVE-2026-8851 (CVSS 8.6) affects SOGo 5.12.7 and prior with a SQL injection in ACL management that could allow authenticated data extraction. If your environment uses SOGo, verify the version and apply updates. https://nvd.nist.gov/vuln/detail/CVE-2026-8851 More at http://adkcyber.com via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning
Post summary
The post announces CVE-2026-8851, a high‑scoring SQL injection vulnerability in SOGo, and advises users to verify versions and apply updates.
0000042
80 followersView on X
Infoflowcloud@infoflowcloud145d
General
🚨*CVE* CVE-2026-8851 SOGo 5.12.7 contains a SQL injection vulnerability in the Access Control List management functionality that allows authenticated users to extract arbitrary data from th… https://www.cve.org/CVERecord?id=CVE-2026-8851 ----- Traducción: CVE-2026-8851 SOG… http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑8851—a SQL injection flaw in SOGo 5.12.7 that lets authenticated users read arbitrary data, without detailing exploits or fixes.
0000046
78 followersView on X
CVE@CVEnew145d
Disclosure
CVE-2026-8851 SOGo 5.12.7 contains a SQL injection vulnerability in the Access Control List management functionality that allows authenticated users to extract arbitrary data from th… https://www.cve.org/CVERecord?id=CVE-2026-8851
Post summary
The post announces that SOGo 5.12.7 contains a SQL injection flaw in its ACL management, permitting authenticated users to read arbitrary data.
00000258
57.5K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds146d
General
CVE-2026-8851 SQL Injection in SOGo 5.12.7 Access Control List Management Functionality https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8851
Post summary
The post lists CVE-2026-8851 as a SQL injection flaw in SOGo 5.12.7’s ACL management, but provides no additional details on exploitation, mitigation, or technical specifics.
0000060
4.0K followersView on X

Explore more

Back to dashboard