CVE-2026-8496 | Alinto SOGo up to 5.12.7 Webmail Interface Description cross site scripting

A vulnerability described as problematic has been identified in Alinto SOGo up to 5.12.7. Affected by this vulnerability is an unknown functionality of the component Webmail Interface. Such manipulation of the argument Description leads to cross site scripting.

This vulnerability is traded as CVE-2026-8496. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.