| CVE-2026-73209 |
An attacker that has valid credentials can send crafted compressed data that causes the affected process to exhaust…
|
6.5
Medium
|
Aug 28, 2026 |
| CVE-2026-73208 |
An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token…
|
7.4
High
|
Aug 28, 2026 |
| CVE-2026-52687 |
An attacker that has valid credentials can select a compression algorithm for the IMAP connection whose decompression…
|
6.5
Medium
|
Aug 28, 2026 |
| CVE-2026-52681 |
Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the…
|
3.1
Low
|
Aug 28, 2026 |
| CVE-2026-42395 |
A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login…
|
4.3
Medium
|
Aug 28, 2026 |
| CVE-2026-42393 |
The comparison used for the doveadm password and API key is not fully timing safe and can reveal the length of the…
|
3.1
Low
|
Aug 28, 2026 |
| CVE-2026-42391 |
An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in,…
|
7.5
High
|
Aug 28, 2026 |
| CVE-2026-42392 |
An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to…
|
4.3
Medium
|
Aug 28, 2026 |
| CVE-2026-42008 |
Forwarding information received from a host listed as a trusted proxy is not kept separate from Dovecot's own…
|
4.3
Medium
|
Aug 28, 2026 |
| CVE-2026-42007 |
An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a…
|
9.1
Critical
|
Aug 28, 2026 |
| CVE-2026-40205 |
An attacker that holds an OAuth2 token granting only part of the required scopes can authenticate, because when more…
|
5.9
Medium
|
Aug 28, 2026 |
| CVE-2026-40204 |
None None None No publicly available exploits are known
|
3.1
Low
|
Aug 28, 2026 |
| CVE-2026-40203 |
When IMAP compression is enabled, the same compression state is reused across responses in a session, so response…
|
3.7
Low
|
Aug 28, 2026 |
| CVE-2026-40018 |
None None None No publicly available exploits are known
|
7.4
High
|
Aug 28, 2026 |
| CVE-2026-40017 |
An attacker that can send mail to a user can craft a message header whose values are chosen to collide in an internal…
|
6.5
Medium
|
Aug 28, 2026 |
| CVE-2026-40015 |
An attacker that has valid credentials can open many connections to the imap-hibernate service and send invalid…
|
4.3
Medium
|
Aug 28, 2026 |
| CVE-2026-40014 |
An attacker that can send mail to a user can craft a message header that makes the IMAP THREAD command consume CPU…
|
6.5
Medium
|
Aug 28, 2026 |
| CVE-2026-40013 |
An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes…
|
4.3
Medium
|
Aug 28, 2026 |
| CVE-2026-33607 |
An attacker that has valid credentials can use IMAP LIST command to consume CPU
|
4.3
Medium
|
Aug 28, 2026 |
| CVE-2026-33606 |
Mail content stored by a user can be crafted so that it is interpreted as dsync protocol commands when an…
|
4.8
Medium
|
Aug 28, 2026 |
| CVE-2026-33605 |
An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before…
|
7.5
High
|
Aug 28, 2026 |
| CVE-2026-33263 |
When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with epoll() panic caused…
|
4.3
Medium
|
Aug 28, 2026 |
| CVE-2026-33604 |
An attacker that can get Dovecot to relay a message, for example through Sieve redirect or submission relay, can use a…
|
5.9
Medium
|
Aug 28, 2026 |
| CVE-2026-27852 |
An attacker that can send mail to a user can craft a message whose headers contain a very large number of email…
|
7.5
High
|
Aug 28, 2026 |
| CVE-2026-40020 |
Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl file even if…
|
3.1
Low
|
May 12, 2026 |