Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

Bleeping Computer

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Multiple critical security vulnerabilities affecting Dovecot 2.4.4 and related versions in Red Hat Enterprise Linux 8 have been addressed in an update to version 2.3.16-16.el8_10. These vulnerabilities include denial of service, authentication bypass, and remote code execution issues across various Dovecot components such as IMAP, ManageSieve, and sieve scripts. The update fixes critical issues including a use-after-free leading to arbitrary code execution and several denial of service vulnerabilities caused by malformed inputs or resource exhaustion.

This Red Hat security advisory addresses multiple vulnerabilities in Dovecot versions used in Red Hat Enterprise Linux 8, including denial of service via IMAP ID command with excessive parameters (CVE-2026-42391), authentication bypass via incorrect OAuth2 token validation (CVE-2026-73208), denial of service via crafted email headers (CVE-2026-27852), denial of service via truncated quoted argument in ManageSieve (CVE-2026-40019), denial of service and potential message duplication via connection limit exhaustion (CVE-2026-33263), denial of service in ManageSieve login process (CVE-2026-33605), arbitrary code execution via sieve editheader use-after-free (CVE-2026-42007), and MySQL multi-byte escaping issues (CVE-2026-40018). The advisory provides fixes in updated Dovecot packages for multiple architectures and variants of Red Hat Enterprise Linux 8. The vulnerabilities affect core mail server components and could allow attackers to cause service disruption, bypass authentication, or execute arbitrary code remotely.

Detailed information about An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME par

An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME parameters, which… (CVE-2026-27852) - Live Threat Intelligence - Threat Radar | OffSeq.com

SUSE ratings

URL of this CSAF notice

SUSE Bug 1276794

SUSE Bug 1276795

SUSE Bug 1276799

SUSE Bug 1276800

SUSE Bug 1276802

SUSE Bug 1276804

SUSE Bug 1276807

SUSE Bug 1276809

SUSE Bug 1276810

SUSE Bug 1276812

SUSE Bug 1276813

SUSE Bug 1276815

SUSE Bug 1276817

SUSE Bug 1276819

SUSE Bug 1276820

SUSE Bug 1276824

SUSE Bug 1276826

SUSE Bug 1276827

URL for SUSE-SU-2026:23595-1

E-Mail link for SUSE-SU-2026:23595-1

https://access.redhat.com/errata/RHSA-2026:76763

https://access.redhat.com/security/updates/classification/#important

2525545

2525547

2525557

2525559

2525567

2525576

2525583

2525584

RHEL-176273

Canonical URL

URL for RHSA-2026:76763

E-Mail link for RHSA-2026:76763

SUSE CVE CVE-2026-27852 page

SUSE CVE CVE-2026-33263 page

SUSE CVE CVE-2026-33605 page

SUSE CVE CVE-2026-40018 page

SUSE CVE CVE-2026-40019 page

SUSE CVE CVE-2026-42007 page

SUSE CVE CVE-2026-42391 page

SUSE CVE CVE-2026-73208 page

URL for RHSA-2026:79371

E-Mail link for RHSA-2026:79371

https://access.redhat.com/errata/RHSA-2026:80825

Red Hat Security Advisory: dovecot security update

CVE-2026-42395 is a medium severity vulnerability in Open-Xchange GmbH's OX Dovecot Pro. It involves uncontrolled resource consumption caused by a trusted proxy sending forwarding information containing a NUL byte, which crashes the login process on subsequent login attempts. This can lead to degradation or denial of service for logins. Systems not configured with trusted proxies are not affected.

The vulnerability occurs when a host configured as a trusted proxy sends forwarding information containing a NUL byte. This input causes the login process in OX Dovecot Pro to crash on the next login attempt, terminating the process and potentially causing denial of service. The issue only affects deployments that configure trusted proxies. No public exploits are known, and no official remediation or patch information is provided in the available data.

Detailed information about CVE-2026-42395: Uncontrolled Resource Consumption in Open-Xchange GmbH OX Dovecot Pro affecting Open-Xchange GmbH OX Dovecot Pro. Get

CVE-2026-42395: Uncontrolled Resource Consumption in Open-Xchange GmbH OX Dovecot Pro - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-42395: Uncontrolled Resource Consumption in Open-Xchange GmbH OX Dovecot Pro


Red Hat Security Advisory: dovecot security updateCVE-2026-27852 0 Multiple critical security vulnerabilities affecting Dovecot 2.4.4 and related versions in Red Hat Enterprise Linux 8 have been addressed in an update to version 2.3.16-16.el8_10. These vulnerabilities include denial of service, authentication bypass, and remote code execution issues across various Dovecot components such as IMAP, ManageSieve, and sieve scripts. The update fixes critical issues including a use-after-free leading to arbitrary code execution and several denial of service vulnerabilities caused by malformed inputs or resource exhaustion. CriticalVulnerability#gcve #osv #ghsa-8fwp-48xw-q2gf Join the discussion	GCVE Database	10/12/2026, 16:28:11 UTC Added: 08/28/2026, 15:22:39 UTC
CVE-2026-42395: Uncontrolled Resource Consumption in Open-Xchange GmbH OX Dovecot ProCVE-2026-42395 0 CVE-2026-42395 is a medium severity vulnerability in Open-Xchange GmbH's OX Dovecot Pro. It involves uncontrolled resource consumption caused by a trusted proxy sending forwarding information containing a NUL byte, which crashes the login process on subsequent login attempts. This can lead to degradation or denial of service for logins. Systems not configured with trusted proxies are not affected. MediumVulnerability#cve #cve-2026-42395 #gcve Join the discussion	CVE Database V5	08/28/2026, 10:12:29 UTC Added: 08/28/2026, 11:22:53 UTC

Threats Tagged 'cve-2026-42395'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-42395'

Lead Pen Test Professional