USN-8993-1: SOGo vulnerability

It was discovered that SOGo used the client-supplied Origin header when constructing password reset links. A remote attacker could possibly use this issue to obtain password reset tokens and take over user accounts.

Attributed to Ubuntu Security Notices · Limited verification; verify facts against the linked source. Read the full article on ubuntu.com.

Source published: 03 Nov 2026, 11:08 PM IST. Source facts take precedence over AI interpretation.