Search: CVE-2026-40015

CVE-2026-40015 is a medium severity vulnerability in Open-Xchange GmbH's OX Dovecot Pro. It involves an out-of-bounds read triggered by an attacker with valid credentials who opens many connections to the imap-hibernate service and sends invalid commands. This can intermittently crash the process, disrupting hibernated IMAP sessions and causing service degradation. No public exploits are known. Mitigation includes disabling IMAP hibernation and updating to a non-vulnerable version.