Skip to contentOpen-xchange Gmbh Ox Dovecot Pro vulnerabilities
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that has valid credentials can send crafted compressed data that causes the affected...CVE-2026-73209Fix available6.5 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that holds a token intended for a different purpose can authenticate, because when an...CVE-2026-73208Fix available7.4 High
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that has valid credentials can select a compression algorithm for the IMAP connection...CVE-2026-52687Fix available6.5 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreSieve CPU resource usage is tracked in the compiled script, so an attacker that has valid...CVE-2026-52681Fix available3.1 Low
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreA host listed as a trusted proxy can send forwarding information containing a NUL byte, which...CVE-2026-42395Fix available4.3 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreThe comparison used for the doveadm password and API key is not fully timing safe and can reveal...CVE-2026-42393Fix available3.1 Low
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes...CVE-2026-42392Fix available4.3 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn unauthenticated attacker can send an IMAP ID command with a very large number of parameters...CVE-2026-42391Fix available7.5 High
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreForwarding information received from a host listed as a trusted proxy is not kept separate from...CVE-2026-42008Fix available4.3 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that has valid credentials can use a Sieve script with the editheader extension to...CVE-2026-42007Fix available9.1 Critical
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that holds an OAuth2 token granting only part of the required scopes can authenticate...CVE-2026-40205Fix available5.9 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreNone None None No publicly available exploits are known.CVE-2026-40204Fix available3.1 Low
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreWhen IMAP compression is enabled, the same compression state is reused across responses in a...CVE-2026-40203Fix available3.7 Low
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreNone None None No publicly available exploits are known.CVE-2026-40018Fix available7.4 High
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that can send mail to a user can craft a message header whose values are chosen to...CVE-2026-40017Fix available6.5 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that has valid credentials can open many connections to the imap-hibernate service...CVE-2026-40015Fix available4.3 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that can send mail to a user can craft a message header that makes the IMAP THREAD...CVE-2026-40014Fix available6.5 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that has valid credentials can submit a Sieve script containing an extreme numeric...CVE-2026-40013Fix available4.3 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that has valid credentials can use IMAP LIST command to consume CPU. This can cause...CVE-2026-33607Fix available4.3 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreMail content stored by a user can be crafted so that it is interpreted as dsync protocol commands...CVE-2026-33606Fix available4.8 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn unauthenticated attacker can crash the ManageSieve login process by sending a small malformed...CVE-2026-33605Fix available7.5 High
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that can get Dovecot to relay a message, for example through Sieve redirect or...CVE-2026-33604Fix available5.9 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreWhen mail_max_userip_connections is set (default 10) and reached, submission-login can crash with...CVE-2026-33263Fix available4.3 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that can send mail to a user can craft a message whose headers contain a very large...CVE-2026-27852Fix available7.5 High
- dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +14 more +16 moreAn attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE...CVE-2026-42006Fix available4.3 Medium
- dovecot, open-xchange gmbh ox dovecot pro +1 moreAttacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl...CVE-2026-40020Fix available3.1 Low
- dovecot, open-xchange gmbh ox dovecot pro +1 moreAttacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypass...CVE-2026-40016Fix available5.3 Medium
- dovecot, open-xchange gmbh ox dovecot pro +1 moreAttacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS...CVE-2026-33603Fix available6.8 Medium
- dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +3 more +5 moreWhen safe filter is used with variable expansion, all following pipelines on the same string are...CVE-2026-27851Fix available7.4 High
- dovecot, open-xchange gmbh ox dovecot pro +1 moreIf auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP...CVE-2026-27860Fix available3.7 Low
- dovecot, open-xchange gmbh ox dovecot pro +1 moreA mail message containing excessive amount of RFC 2231 MIME parameters causes LMTP to use too...CVE-2026-27859Fix available5.3 Medium
- dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +16 more +18 moreAttacker can send a specifically crafted message before authentication that causes managesieve to...CVE-2026-27858Fix available7.5 High
- dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +16 more +18 moreSending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory...CVE-2026-27857Fix available4.3 Medium
- dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +4 more +6 moreDoveadm credentials are verified using direct comparison which is susceptible to timing oracle...CVE-2026-27856Fix available7.4 High
- dovecot, open-xchange gmbh ox dovecot pro +1 moreDovecot OTP authentication is vulnerable to replay attack under specific conditions. If auth...CVE-2026-27855Fix available6.8 Medium
- dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +4 more +6 moreDovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin....CVE-2026-24031Public exploitFix available7.7 High
- dovecot, open-xchange gmbh ox dovecot pro +1 moreWhen dovecot has been configured to use per-domain passwd files, and they are placed one path...CVE-2026-0394Fix available5.3 Medium
- dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +16 more +18 moreManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be...CVE-2025-59032Fix available7.5 High
- dovecot, open-xchange gmbh ox dovecot pro +1 moreDovecot has provided a script to use for attachment to text conversion. This script unsafely...CVE-2025-59031Fix available4.3 Medium
- dovecot, open-xchange gmbh ox dovecot pro +1 moreWhen sending invalid base64 SASL data, login process is disconnected from the auth server,...CVE-2025-59028Fix available5.3 Medium
- open-xchange gmbh ox dovecot proWhen cache is enabled, some passdb/userdb drivers incorrectly cache all users with same cache key...CVE-2025-30189Fix available7.4 High
- open-xchange gmbh ox dovecot proDovecot accepts dot LF DOT LF symbol as end of DATA command. RFC requires that it should always...CVE-2024-255845.3 Medium
- open-xchange ox dovecot proVery large headers can cause resource exhaustion when parsing message. The message-parser...CVE-2024-23185Fix available7.5 High
- open-xchange gmbh ox dovecot proHaving a large number of address headers (From, To, Cc, Bcc, etc.) becomes excessively CPU...CVE-2024-23184Fix available5.0 Medium