CVE-2026-8851 — SOGo versions 5.12.7 and prior contains a SQL injection vulnerability in the Access Control List management functionality that allows authenticated users to extract arbitrary data from the database by — CVE Database · The Intelligence Room