Open-xchange Dovecot vulnerabilities

• dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +14 more +16 more An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE... CVE-2026-42006 Fix available 4.3 MediumMay 12, 2026
• dovecot, open-xchange gmbh ox dovecot pro +1 more Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl... CVE-2026-40020 Fix available 3.1 LowMay 12, 2026
• dovecot, open-xchange gmbh ox dovecot pro +1 more Attacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypass... CVE-2026-40016 Fix available 5.3 MediumMay 12, 2026
• dovecot, open-xchange gmbh ox dovecot pro +1 more Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS... CVE-2026-33603 Fix available 6.8 MediumMay 12, 2026
• dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +3 more +5 more When safe filter is used with variable expansion, all following pipelines on the same string are... CVE-2026-27851 Fix available 7.4 HighMay 12, 2026
• dovecot, open-xchange gmbh ox dovecot pro +1 more If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP... CVE-2026-27860 Fix available 3.7 LowMarch 27, 2026
• dovecot, open-xchange gmbh ox dovecot pro +1 more A mail message containing excessive amount of RFC 2231 MIME parameters causes LMTP to use too... CVE-2026-27859 Fix available 5.3 MediumMarch 27, 2026
• dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +16 more +18 more Attacker can send a specifically crafted message before authentication that causes managesieve to... CVE-2026-27858 Fix available 7.5 HighMarch 27, 2026
• dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +16 more +18 more Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory... CVE-2026-27857 Fix available 4.3 MediumMarch 27, 2026
• dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +4 more +6 more Doveadm credentials are verified using direct comparison which is susceptible to timing oracle... CVE-2026-27856 Fix available 7.4 HighMarch 27, 2026
• dovecot, open-xchange gmbh ox dovecot pro +1 more Dovecot OTP authentication is vulnerable to replay attack under specific conditions. If auth... CVE-2026-27855 Fix available 6.8 MediumMarch 27, 2026
• dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +4 more +6 more Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin.... CVE-2026-24031 Public exploitFix available 7.7 HighMarch 27, 2026
• dovecot, open-xchange gmbh ox dovecot pro +1 more When dovecot has been configured to use per-domain passwd files, and they are placed one path... CVE-2026-0394 Fix available 5.3 MediumMarch 27, 2026
• dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +16 more +18 more ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be... CVE-2025-59032 Fix available 7.5 HighMarch 27, 2026
• dovecot, open-xchange gmbh ox dovecot pro +1 more Dovecot has provided a script to use for attachment to text conversion. This script unsafely... CVE-2025-59031 Fix available 4.3 MediumMarch 27, 2026
• dovecot, open-xchange gmbh ox dovecot pro +1 more When sending invalid base64 SASL data, login process is disconnected from the auth server,... CVE-2025-59028 Fix available 5.3 MediumMarch 27, 2026
• open-xchange ox dovecot pro Very large headers can cause resource exhaustion when parsing message. The message-parser... CVE-2024-23185 Fix available 7.5 HighAugust 17, 2024