Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

Bleeping Computer

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Multiple critical security vulnerabilities affecting Dovecot 2.4.4 and related versions in Red Hat Enterprise Linux 8 have been addressed in an update to version 2.3.16-16.el8_10. These vulnerabilities include denial of service, authentication bypass, and remote code execution issues across various Dovecot components such as IMAP, ManageSieve, and sieve scripts. The update fixes critical issues including a use-after-free leading to arbitrary code execution and several denial of service vulnerabilities caused by malformed inputs or resource exhaustion.

This Red Hat security advisory addresses multiple vulnerabilities in Dovecot versions used in Red Hat Enterprise Linux 8, including denial of service via IMAP ID command with excessive parameters (CVE-2026-42391), authentication bypass via incorrect OAuth2 token validation (CVE-2026-73208), denial of service via crafted email headers (CVE-2026-27852), denial of service via truncated quoted argument in ManageSieve (CVE-2026-40019), denial of service and potential message duplication via connection limit exhaustion (CVE-2026-33263), denial of service in ManageSieve login process (CVE-2026-33605), arbitrary code execution via sieve editheader use-after-free (CVE-2026-42007), and MySQL multi-byte escaping issues (CVE-2026-40018). The advisory provides fixes in updated Dovecot packages for multiple architectures and variants of Red Hat Enterprise Linux 8. The vulnerabilities affect core mail server components and could allow attackers to cause service disruption, bypass authentication, or execute arbitrary code remotely.

Detailed information about An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME par

An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME parameters, which… (CVE-2026-27852) - Live Threat Intelligence - Threat Radar | OffSeq.com

SUSE ratings

URL of this CSAF notice

SUSE Bug 1276794

SUSE Bug 1276795

SUSE Bug 1276799

SUSE Bug 1276800

SUSE Bug 1276802

SUSE Bug 1276804

SUSE Bug 1276807

SUSE Bug 1276809

SUSE Bug 1276810

SUSE Bug 1276812

SUSE Bug 1276813

SUSE Bug 1276815

SUSE Bug 1276817

SUSE Bug 1276819

SUSE Bug 1276820

SUSE Bug 1276824

SUSE Bug 1276826

SUSE Bug 1276827

URL for SUSE-SU-2026:23595-1

E-Mail link for SUSE-SU-2026:23595-1

https://access.redhat.com/errata/RHSA-2026:76763

https://access.redhat.com/security/updates/classification/#important

2525545

2525547

2525557

2525559

2525567

2525576

2525583

2525584

RHEL-176273

Canonical URL

URL for RHSA-2026:76763

E-Mail link for RHSA-2026:76763

SUSE CVE CVE-2026-27852 page

SUSE CVE CVE-2026-33263 page

SUSE CVE CVE-2026-33605 page

SUSE CVE CVE-2026-40018 page

SUSE CVE CVE-2026-40019 page

SUSE CVE CVE-2026-42007 page

SUSE CVE CVE-2026-42391 page

SUSE CVE CVE-2026-73208 page

URL for RHSA-2026:79371

E-Mail link for RHSA-2026:79371

https://access.redhat.com/errata/RHSA-2026:80825

Red Hat Security Advisory: dovecot security update

CVE-2026-42393 is a vulnerability in Open-Xchange GmbH OX Dovecot Pro where the comparison for the doveadm password and API key is not fully timing safe. This flaw allows an attacker on the same network to infer the length of the secret by measuring response timing, potentially reducing the effort needed to guess the secret. The secret itself is not disclosed. No public exploits are known, and the vulnerability has a low severity rating.

The vulnerability arises from a timing side-channel in the comparison function used for doveadm passwords and API keys in OX Dovecot Pro. Because the comparison is not fully timing safe, an attacker with network access to the doveadm service can perform repeated requests and measure response times to determine the length of the secret. While the secret value is not directly leaked, knowing its length can aid in guessing attacks. The vulnerability affects specific versions of OX Dovecot Pro and requires network-level access to the service.

Detailed information about CVE-2026-42393: Exposure of Sensitive Information to an Unauthorized Actor in Open-Xchange GmbH OX Dovecot Pro affecting Open-Xchange

CVE-2026-42393: Exposure of Sensitive Information to an Unauthorized Actor in Open-Xchange GmbH OX Dovecot Pro - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-42393: Exposure of Sensitive Information to an Unauthorized Actor in Open-Xchange GmbH OX Dovecot Pro


Red Hat Security Advisory: dovecot security updateCVE-2026-27852 0 Multiple critical security vulnerabilities affecting Dovecot 2.4.4 and related versions in Red Hat Enterprise Linux 8 have been addressed in an update to version 2.3.16-16.el8_10. These vulnerabilities include denial of service, authentication bypass, and remote code execution issues across various Dovecot components such as IMAP, ManageSieve, and sieve scripts. The update fixes critical issues including a use-after-free leading to arbitrary code execution and several denial of service vulnerabilities caused by malformed inputs or resource exhaustion. CriticalVulnerability#gcve #osv #ghsa-8fwp-48xw-q2gf Join the discussion	GCVE Database	10/12/2026, 16:28:11 UTC Added: 08/28/2026, 15:22:39 UTC
CVE-2026-42393: Exposure of Sensitive Information to an Unauthorized Actor in Open-Xchange GmbH OX Dovecot ProCVE-2026-42393 0 CVE-2026-42393 is a vulnerability in Open-Xchange GmbH OX Dovecot Pro where the comparison for the doveadm password and API key is not fully timing safe. This flaw allows an attacker on the same network to infer the length of the secret by measuring response timing, potentially reducing the effort needed to guess the secret. The secret itself is not disclosed. No public exploits are known, and the vulnerability has a low severity rating. LowVulnerability#cve #cve-2026-42393 #gcve Join the discussion	CVE Database V5	08/28/2026, 10:12:28 UTC Added: 08/28/2026, 11:22:53 UTC

Threats Tagged 'cve-2026-42393'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-42393'

Lead Pen Test Professional