Back to the CVE list
CVE-2026-93453

SOGo before 5.12.11 Password Reset Token Interception via Origin Header

CVSS score

8.7

EPSS probability

%0.5

Risk score

0.0

Published

28 d ago

OverviewPublic Exploits (1)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
Faceless0x7/CVE-2026-93453
GitHub

CVE-2026-93453 Exploit — SOGo password reset link poisoning via attacker-controlled Origin header, enabling password reset token interception and account takeover.

Public PoCSource updated: 18.09.2026 11:44:24

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-93453"