TopVuln

High-risk vulnerability digests

CVE-2026-27858

  • HIGH

dovecot security update

Details

CVSS v3
7.5
NVD published
2026-03-27 09:16:20
EPSS
<0.1% probability · 6.1th percentile — 2026-05-06
Affected versions
cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:* cpe:2.3:a:open-xchange:dovecot:*:*:*:*:pro:*:*:* cpe:2.3:a:open-xchange:dovecot:*:*:*:*:pro:*:*:* cpe:2.3:a:open-xchange:dovecot:*:*:*:*:pro:*:*:*
Summary
Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory. Attacker can force managesieve-login to be unavailable by repeatedly crashing the process. Protect access to managesieve protocol, or install fixed version. No publicly available exploits are known.
Remediation
Not available in our cache.
Exploit info
Not available in our cache.

View on NVD

TopVuln sends digest emails with high-risk CVE picks across multiple authoritative sources—curated with EPSS and AI. Choose daily per-stream emails and optional weekly or monthly roundups.

Subscribe — free email digest or paid plan

Information is aggregated from multiple authoritative sources for convenience; verify with NVD and vendors before operational decisions.