← Back

CVE-2026-33550

nvd nist
Published: Mar 22, 2026Modified: Jun 17, 2026

JSON object

Loading...
2.6
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
Exploitability: 1.2 / Impact: 1.4
Source: NVD

Description

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length (only 12 digits instead of the 20 recommended).

Affected (1)

Products: Alinto: Sogo
Alinto
1 product
Sogo
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Sogo
Before 5.12.5

Related CWEs

CWE-308
Use of Single-factor Authentication
The use of single-factor authentication can lead to unnecessary risk of compromise when compared with the benefits of a dual-factor authentication scheme.

References (2)

Source: cve@mitre.org
Patch
Source: cve@mitre.org
Release Notes

Timeline

No history available yet.