OD
Product
OX Dovecot Pro
44
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 12Medium 26Low 4
Watch
Add OX Dovecot Pro to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40203 | 3.7 | Aug 28 | When IMAP compression is enabled, the same compression state is reused across responses in a session, so response sizes depend on both attacker-supplied mail and other mail in the… Affected: 2.3.0 before 2.3.22.2; 3.0.0 before 3.0.7; 3.1.0 before 3.1.6 |
| CVE-2026-52681 | 3.1 | Aug 28 | Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the accounting by repeatedly changing the active script Affected: 2.3.15 before 2.3.22.2; 3.0.0 before 3.0.7; 3.1.0 before 3.1.6 |
| CVE-2026-42393 | 3.1 | Aug 28 | The comparison used for the doveadm password and API key is not fully timing safe and can reveal the length of the configured secret Affected: 2.3.0 before 2.3.22.2; 3.0.0 before 3.0.7; 3.1.0 before 3.1.6 |
| CVE-2026-40204 | 3.1 | Aug 28 | None None None No publicly available exploits are known Affected: 2.3.0 before 2.3.22.2; 3.0.0 before 3.0.7; 3.1.0 before 3.1.6 |
Showing 4