CVE 7.5 HIGH

CVE-2026-27858_CVE-2026-27858

7.5 / 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory.
Attacker can force managesieve-login to be unavailable by repeatedly crashing the process. Protect access to managesieve protocol, or install fixed version. No publicly available exploits are known.

Basic Information

ID CVE-2026-27858
Source OX
Published Mar 27, 2026 at 08:10
Modified Mar 27, 2026 at 12:37

Affected Product

Vendor Open-Xchange GmbH
Product OX Dovecot Pro
Affected Versions Open-Xchange GmbH OX Dovecot Pro 0
Open-Xchange GmbH OX Dovecot Pro 0
Open-Xchange GmbH OX Dovecot Pro 0

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.