Linagora vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Linagora products: 3 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2025-70039 Critical · 9.8 CWE-78 Mar 9, 2026

OS Command Injection in Linagora Twake

An issue pertaining to CWE-78: Improper Neutralization of Special Elements used in an OS Command was discovered in linagora Twake v2023.Q1.1223.

CVE-2025-70038 High · 8.8 CWE-79 Mar 9, 2026

Cross-site Scripting (XSS) in Linagora Twake

An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in linagora Twake v2023.Q1.1223. This allows attackers to execute arbitrary code.

CVE-2025-70037 Medium · 6.1 CWE-601 Mar 9, 2026

Open Redirect in Linagora Twake

An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in linagora Twake v2023.Q1.1223. This allows attackers to obtain sensitive information and execute arbitrary code.