CVE-2026-52681: Excessive Platform Resource Consumption within a Loop in Open-Xchange GmbH OX Dovecot Pro
Description
CVE-2026-52681 is a vulnerability in Open-Xchange GmbH OX Dovecot Pro involving excessive CPU and disk resource consumption. An attacker with valid credentials can bypass the configured Sieve CPU limit by repeatedly changing the active script, resetting CPU usage accounting. Additionally, compiled script files are not removed when scripts are deleted or renamed, leading to increased disk consumption. These issues can degrade mail delivery service. No public exploits are known, and the CVSS score rates this as a low-severity issue.
CVSS v3.1
Score 3.1low
Affected software
Open-Xchange GmbH
OX Dovecot Pro
Open-Xchange GmbH
OX Dovecot CE
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability allows an authenticated attacker to bypass the Sieve CPU resource limit by resetting CPU usage accounting through repeated changes to the active script. Compiled script files remain on disk after script deletion or renaming, causing disk space consumption. Both factors can lead to sustained CPU and disk resource usage, potentially degrading mail delivery service performance. No public exploits have been reported. The affected product is OX Dovecot Pro versions 2.3.15, 3.0.0, and 3.1.0.
Potential Impact
An attacker with valid credentials can cause sustained CPU consumption by bypassing the Sieve CPU limit and increase disk usage due to leftover compiled script files. This can degrade the mail delivery service but does not impact confidentiality or integrity. The CVSS score of 3.1 reflects a low impact primarily on availability.
Mitigation Recommendations
No official patch or remediation level is provided in the available data. Users should monitor systems for abnormal CPU and disk usage. Updating to a non-vulnerable version is recommended once available. Since no public exploits are known, immediate urgent action is not indicated.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- OX
- Date Reserved
- 2026-06-08T08:05:31.707Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6a916f8dacd9273b49cf9252
Added to database: 08/28/2026, 11:22:53 UTC
Last enriched: 09/10/2026, 02:38:46 UTC
Last updated: 10/11/2026, 06:48:17 UTC
Views: 94
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.