3.1
Low
CVE-2026-40204 None None None No publicly available exploits are known
Description
None None None No publicly available exploits are known.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OX Dovecot Pro 3.1 | 3.1.0 → < 3.1.6 | 3.1.6 |
| OX Dovecot Pro 3.0 | 3.0.0 → < 3.0.7 | 3.0.7 |
| OX Dovecot Pro 2.3 | 2.3.0 → < 2.3.22.2 | 2.3.22.2 |
| OX Dovecot CE 2.3 | 2.3.0 → < 2.4.5 | 2.4.5 |
References
- documentation.open-xchange.com documentation.open-xchange.com
Timeline
- Published
- Last modified
Other CVEs of OX Dovecot Pro
The 44 CVEs of OX Dovecot Pro →
CVE-2026-73209
An attacker that has valid credentials can send crafted compressed data that causes the affected process to exhaust…
6.5
Medium
CVE-2026-73208
An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token…
7.4
High
CVE-2026-52687
An attacker that has valid credentials can select a compression algorithm for the IMAP connection whose decompression…
6.5
Medium
CVE-2026-52681
Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the…
3.1
Low