OD
Product
OX Dovecot CE
25
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 15Low 4
Watch
Add OX Dovecot CE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42391 | 7.5 | Aug 28 | An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CPU usage to grow disproportionately Affected: 2.3.0 before 2.4.5 |
| CVE-2026-33605 | 7.5 | Aug 28 | An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating Affected: 2.3.0 before 2.4.5 |
| CVE-2026-27852 | 7.5 | Aug 28 | An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME parameters, which causes excessive memory usage… Affected: 2.3.0 before 2.4.5 |
| CVE-2026-73208 | 7.4 | Aug 28 | An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token response does not contain a scope claim, the audience claim is used… Affected: 2.3.13 before 2.4.5 |
| CVE-2026-40018 | 7.4 | Aug 28 | None None None No publicly available exploits are known Affected: 2.3.0 before 2.4.5 |
Showing 5