Threats Tagged 'cve-2026-42391'
View all threats tagged with 'cve-2026-42391'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-42391'
Click on any threat for detailed analysis and mitigation recommendations
0 Multiple critical security vulnerabilities affecting Dovecot 2.4.4 and related versions in Red Hat Enterprise Linux 8 have been addressed in an update to version 2.3.16-16.el8_10. These vulnerabilities include denial of service, authentication bypass, and remote code execution issues across various Dovecot components such as IMAP, ManageSieve, and sieve scripts. The update fixes critical issues including a use-after-free leading to arbitrary code execution and several denial of service vulnerabilities caused by malformed inputs or resource exhaustion. Join the discussion | GCVE Database | 10/12/2026, 16:28:11 UTC Added: 08/28/2026, 15:22:39 UTC |
0 CVE-2026-42391 is a high-severity vulnerability in Open-Xchange GmbH OX Dovecot Pro where an unauthenticated attacker can send an IMAP ID command with many parameters before login, causing excessive memory and CPU usage. This can lead to termination of the login process and denial of service for IMAP logins. No public exploits are known. Mitigation includes limiting the number of connections per imap-login process or updating to a non-vulnerable version. Join the discussion | GCVE Database | 08/28/2026, 10:12:27 UTC Added: 08/28/2026, 15:22:33 UTC |
0 CVE-2026-42391 is a high-severity vulnerability in Open-Xchange GmbH OX Dovecot Pro where an unauthenticated attacker can send an IMAP ID command with many parameters before login, causing excessive memory and CPU usage. This can lead to termination of the login process and denial of service for IMAP logins. No public exploits are known. Mitigation includes limiting connections per imap-login process or updating to a non-vulnerable version. Join the discussion | CVE Database V5 | 08/28/2026, 10:12:27 UTC Added: 08/28/2026, 11:22:50 UTC |
Showing 1 to 3 of 3 results