Search: CVE-2026-42007

CVE-2026-42007 is a critical use-after-free vulnerability in Open-Xchange GmbH's OX Dovecot Pro. An attacker with valid credentials can exploit the Sieve editheader extension to cause memory corruption during mail delivery, potentially leading to arbitrary code execution. The vulnerability can crash the mail delivery process and leak memory. Disabling the Sieve editheader extension or updating to a non-vulnerable version mitigates the issue. No public exploits are currently known.