Threats Tagged 'cve-2026-52687'

Multiple critical security vulnerabilities affecting Dovecot 2.4.4 and related versions in Red Hat Enterprise Linux 8 have been addressed in an update to version 2.3.16-16.el8_10. These vulnerabilities include denial of service, authentication bypass, and remote code execution issues across various Dovecot components such as IMAP, ManageSieve, and sieve scripts. The update fixes critical issues including a use-after-free leading to arbitrary code execution and several denial of service vulnerabilities caused by malformed inputs or resource exhaustion.

CVE-2026-52687 is a medium severity vulnerability in Open-Xchange GmbH OX Dovecot Pro where an authenticated attacker can cause a denial of service by selecting a compression algorithm for IMAP connections that consumes excessive memory. This leads to process termination and service disruption. No public exploits are known. Mitigation includes disabling IMAP compression or limiting connections per imap-login process, with an update to a non-vulnerable version recommended.

CVE-2026-52687 is a vulnerability in Open-Xchange GmbH's OX Dovecot Pro that allows an authenticated attacker to cause uncontrolled resource consumption by selecting a compression algorithm for IMAP connections that requires excessive memory for decompression. This can lead to process termination and denial of service for IMAP. No public exploits are known. Mitigation includes disabling IMAP compression or limiting connections per imap-login process, with a recommendation to update to a non-vulnerable version.