CVE-2026-46445: Alinto Sogo

High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days.

SOGo before 5.12.7, when PostgreSQL is used, allows SQL injection.

Affected products

• Alinto Sogo: before 5.12.7 (fixed in 5.12.7)

Published 2026-05-14. Last modified 2026-06-17.