Search: CVE-2026-33606

CVE-2026-33606 is a medium severity vulnerability in Open-Xchange GmbH's OX Dovecot Pro that allows crafted mail content to be interpreted as dsync protocol commands during migration or replication using the stream protocol. This can lead to unauthorized modification of mailbox state and internal mailbox attributes. No public exploits are known. Users are advised to avoid running dsync with the stream protocol on mailboxes containing untrusted content and to update to a non-vulnerable version when available.