Home › CVE Intelligence › CVE-2026-58451
CVSS 8.0 HIGH 🔴 ACTIVELY EXPLOITED Zero-Day Exploit

CVE-2026-58451: [fulldis] CVE-2026-58451 - Horde Groupware IMP path traversal vuln

<p>Posted by ㅤevan via Fulldisclosure on Jul 02</p>this is my first time sending to a mailing list so ive chosen<br> something easy. here goes:<br> <br> Summary: Horde Groupware’s IMP Webma…

8.0CVSS Score
HIGHSeverity
NOCISA KEV
Zero-Day ExploitImpact Type

📋 Vulnerability Details

CVE IDCVE-2026-58451
VendorSecLists
Affected ProductMultiple Targets
Vulnerability TypeZero-Day Exploit
CVSS Score8.0 (HIGH)
Actively Exploited✅ Yes
Patch StatusSee Vendor Advisory →
Reported ByCYBERDUDEBIVASH SENTINEL APEX Intelligence (via fulldisclosure)

🔬 Technical Analysis

<p>Posted by ㅤevan via Fulldisclosure on Jul 02</p>this is my first time sending to a mailing list so ive chosen<br> something easy. here goes:<br> <br> Summary: Horde Groupware’s IMP Webmail solution contains a path<br> traversal/local file inclusion vulnerability which could be exploited<br> to escalate privileges or bypass authentication (through CSRF if<br> unauthenticated).<br> <br> the vulnerability is in here:<br> <br> } elseif (strcasecmp($node->tagName, 'IMG') === 0) {<br> /* Check f

📚 Advisory References

⚡ DETECTION RULES AVAILABLE

Get CVE-2026-58451 Detection Pack

Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.

✓ Sigma Rules ✓ YARA Pack ✓ IOC Table ✓ SIEM Queries
🛡️ Get Detection Pack → 🔌 Access via API →

🔗 Related Intelligence