Threats Tagged 'cve-2026-40014'

Multiple critical security vulnerabilities affecting Dovecot 2.4.4 and related versions in Red Hat Enterprise Linux 8 have been addressed in an update to version 2.3.16-16.el8_10. These vulnerabilities include denial of service, authentication bypass, and remote code execution issues across various Dovecot components such as IMAP, ManageSieve, and sieve scripts. The update fixes critical issues including a use-after-free leading to arbitrary code execution and several denial of service vulnerabilities caused by malformed inputs or resource exhaustion.

CVE-2026-40014 is a vulnerability in Open-Xchange GmbH OX Dovecot Pro where crafted email message headers can cause excessive CPU consumption when the IMAP THREAD command is issued. This can lead to degradation or denial of service for IMAP clients. No public exploits are known. Users should monitor for abnormal CPU usage and remove offending messages. Updating to a non-vulnerable version is recommended.

CVE-2026-40014 is a medium severity vulnerability in Open-Xchange GmbH OX Dovecot Pro that allows an attacker who can send mail to a user to craft a message header causing the IMAP THREAD command to consume excessive CPU resources. This can degrade or deny IMAP service when a mail client issues the THREAD command on the affected mailbox. No public exploits are known. Mitigation involves monitoring for abnormal CPU usage, killing offending processes, removing malicious messages, and updating to a non-vulnerable version if available.