CVE-2026-8496: Zero-Day in SOGo Webmail Exploited by TA458

CVE-2026-8496 is a zero-day vulnerability in the SOGo webmail platform exploited by TA458 in March 2026. It was patched in version 5.12.8.